Description
Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in (1) index.cgi and (2) viewday.cgi.
Metrics
CVSS 2.0 4.3/10
AV:N/AC:M/Au:N/C:N/I:P/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://secunia.com/advisories/19066
- http://www.securityfocus.com/archive/1/426198/100/0/threaded
- http://www.vupen.com/english/advisories/2006/0764
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24946
- http://secunia.com/advisories/19066
- http://www.securityfocus.com/archive/1/426198/100/0/threaded
- http://www.vupen.com/english/advisories/2006/0764
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24946
Timeline
- Published
- Mar 3, 2006
- Last modified
- Jun 16, 2026
- NVD status
- Modified