medium5.0
CVE-2006-6229
Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords from the log file.
Impact
Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords from the log file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codewalkers | Ltwcalendar | Versions 4.1.3, 4.2 |