Sweetphp Totalcalender vulnerabilities

• sweetphp totalcalender admin/manage_users.php in TotalCalendar 2.4 does not require administrative authentication, which... CVE-2009-4929 Public exploit 7.5 HighJuly 9, 2010