Unscored CVE-2004-1651 EUVD-2004-1645GHSA-qxc5-37gj-mcj7

Multiple cross-site scripting (XSS) vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject ar…

Published Feb 20, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Lastname fields during new user registration, or (3) the Schedule Name field.

References

9451 vdb-entry
phpscheduleit-script-injection(17194) vdb-entry
20040917 Re: Multiple Vulnerabilities in phpScheduleIt mailing-list
20040831 Multiple Vulnerabilities in phpScheduleIt mailing-list
phpscheduleit-xss(17193) vdb-entry
11080 vdb-entry
1011127 vdb-entry