| Package | Affected versions | Patched versions |
|---|---|---|
| luxcal web calendar | < 5.3.3l< 5.3.3m | 5.3.3l5.3.3m |
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free