Total vulnerabilities in the database
WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames.
| Software | From | Fixed in |
|---|---|---|
| webcalendar / webcalendar | 1.0.2 | 1.0.2.x |
| webcalendar / webcalendar | 1.0.1 | 1.0.1.x |
| webcalendar / webcalendar | 1.0.3 | 1.0.3.x |