Unscored CVE-2006-2291 EUVD-2006-2292GHSA-5qvg-x3jf-r376

Cross-site scripting (XSS) vulnerability in calendar_new.asp in IA-Calendar allows remote attackers to inject arbitrary web script or HTML …

Published May 9, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in calendar_new.asp in IA-Calendar allows remote attackers to inject arbitrary web script or HTML via the TypeName1 parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

References

iacalendar-calendarnew-xss(26361) vdb-entry
20037 third-party-advisory
ADV-2006-1731 vdb-entry
25354 vdb-entry
17925 vdb-entry