CVE-2004-1509

CVE-2004-1509 describes an information disclosure vulnerability in WebCalendar's validate.php script, affecting all versions of the product. An attacker can exploit this by providing an invalid encoded_login parameter, which causes an error message to reveal the full path of the application on the server. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and allows for remote, low-complexity attacks without authentication to gain sensitive information. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.