CVE-2008-5738: Nodstrum MySQL Calendar

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2 cookie to 1. NOTE: some of these details are obtained from third party information.

Affected products

• Nodstrum MySQL Calendar: version 1.1 only; version 1.2 only

Published 2008-12-26. Last modified 2026-06-16.