Unscored CVE-2006-0980 EUVD-2006-0983GHSA-32vm-p79v-jmj9

Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or…

Published Mar 3, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in (1) index.cgi and (2) viewday.cgi.

References

20060226 CGI Calendar XSS Vulnerability mailing-list
ADV-2006-0764 vdb-entry
19066 third-party-advisory
cgicalendar-index-viewday-xss(24946) vdb-entry