CVE-2006-2798 | BDVDB-2026-17322 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) LoName parameter in (a) week.php and (b) month.php and (2) AddressLink parameter in (c) event.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/31692
https://exchange.xforce.ibmcloud.com/vulnerabilities/26648
http://www.osvdb.org/31691
https://exchange.xforce.ibmcloud.com/vulnerabilities/26647
http://www.osvdb.org/31693
https://www.exploit-db.com/exploits/1818

Exploit#

https://www.exploit-db.com/exploits/1818

History#

Version 12006-06-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.