CVE Certified
GHDB

"powered by ducalendar" -site:duware.com

prev next

Google search: "powered by ducalendar" -site:duware.com

Hits: 1711

Submited: 2004-11-23

Most duware products use Microsoft Access databases in default locations without instructing the users to change them. The plain text admin passwords are just a click away for any attacker who knows how to type an URL. For Ducalendar it's: /ducalendar/_private/ducalendar.mdb