CVE-2008-3849 | BDVDB-2026-32172 Detail

Description#

Cross-site scripting (XSS) vulnerability in the calendar controller in Civic Website Manager before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving (1) month, (2) day, and (3) year fields.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/31609
http://secunia.com/advisories/31641
http://www.securityfocus.com/bid/30833
http://sourceforge.net/project/shownotes.php?group_id=234663&release_id=621954
https://exchange.xforce.ibmcloud.com/vulnerabilities/44673

Exploit#

No public exploit known

History#

Version 12008-08-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.