Read the docs

Calacode

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Calacode records in CISA KEV

No Calacode vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Atmail Webmail System 3 records LOW At Mail Webmail System 2 records LOW Atmail 2 records LOW

Records

2 records in Atmail · all components

TI-2008-03426 CVE-2008-3579 · GHSA-969c-936f-xr59

Calacode @Mail 5.41 on Linux does not require administrative authentication for…

Priority LOW 38

Calacode @Mail 5.41 on Linux does not require administrative authentication for build-plesk-upgrade.php, which allows remote attackers to obtain sensitive information by creating and downloading a backup archive of the e…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02076 Published 2008-08-10 No fix listed CWE-287
TI-2008-03256 CVE-2008-3395 · GHSA-pj65-hgjq-jjx9

Calacode @Mail 5.41 on Linux uses weak world-readable permissions for (1)…

Priority LOW 26

Calacode @Mail 5.41 on Linux uses weak world-readable permissions for (1) webmail/libs/Atmail/Config.php and (2) webmail/webadmin/.htpasswd, which allows local users to obtain sensitive information by reading these files…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01332 Published 2008-07-31 No fix listed CWE-264
Open these records in search →