Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2002-2065

WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary include files with .inc extensions from the web root.

Published: Dec 31, 2002
Updated: Nov 9, 2025
CVE: CVE-2002-2065
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
webcalendar / webcalendar	0.9.34	0.9.34.x
webcalendar / webcalendar	0.9.31	0.9.31.x
webcalendar / webcalendar	0.9.32	0.9.32.x
webcalendar / webcalendar	0.9.33	0.9.33.x

http://sourceforge.net/project/shownotes.php?group_id=3870&release_id=93295
http://www.iss.net/security_center/static/9296.php
http://www.securityfocus.com/bid/4961

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo