Unscored CVE-2006-4224 EUVD-2006-4214GHSA-mqvh-f45h-9qm2

Cross-site scripting (XSS) vulnerability in calendar.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to inject arbitrar…

Published Aug 18, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in calendar.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the year parameter. NOTE: The page parameter vector is covered by CVE-2006-4009.

References

20060814 Virtual War v1.5.0 SQL injection and XSS mailing-list
virtualwar-calendar-xss(28552) vdb-entry
1413 third-party-advisory