CVE-2008-5738: Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrativ...

Security readout for executives and security teams

Nodstrum MySQL Calendar 1.1 and 1.2 reportedly lets a remote attacker bypass login and obtain administrative access by manipulating a client-side cookie. The business risk is highest where this legacy calendar is still internet-accessible, because administrative control could enable content changes or further compromise. Exposure is limited to organizations still running Nodstrum MySQL Calendar 1.1 or 1.2. Public-facing deployments, especially admin-accessible calendar installations, should be prioritized. The provided affected-product metadata is incomplete, so asset confirmation is necessary. Prioritize if this software is still present and reachable. The issue is old, but administrative bypass in a legacy web app can create outsized risk when forgotten systems remain exposed. Mitigation focus: Inventory for Nodstrum MySQL Calendar 1.1 or 1.2 deployments.; Remove or replace unsupported installations if no vendor fix is available.; Check vendor or archived third-party guidance before upgrading..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.