Unscored CVE-2005-1146 EUVD-2005-1149GHSA-v2w8-m6c5-xg55

NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in the login command in calendar.pl in CalendarS…

Published Apr 16, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in the login command in calendar.pl in CalendarScript 3.21 allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-1145

References

calendarscript-calendarpl-xss(20103) vdb-entry
1013705 vdb-entry
http://www.snkenjoi.com/secadv/secadv3.txt