Description
Multiple cross-site scripting (XSS) vulnerabilities in sitex allow remote attackers to inject arbitrary web script or HTML via (1) the sxYear parameter to calendar.php, (2) the search parameter to search.php, (3) the linkid parameter to redirect.php, or (4) the page parameter to calendar_events.php.
References
- 20070223 sitex multiple vulnerabilities mailing-list
- 33161 vdb-entry
- 33158 vdb-entry
- 2373 third-party-advisory
- 20070414 Re: sitex multiple vulnerabilities mailing-list
- 33159 vdb-entry
- 33160 vdb-entry