Unscored CVE-2010-0349 EUVD-2010-0380GHSA-pxc8-mqgf-jh84

Cross-site scripting (XSS) vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to inject arbitrary web script …

Published Jan 15, 2010 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: this issue could not be reproduced by the vendor, but a patch was provided anyway. The original researcher is reliable.

References

61629 vdb-entry
http://webcal.c-3.jp/zeijakusei.html
JVNDB-2010-000002 third-party-advisory
38135 third-party-advisory
JVN#33977065 third-party-advisory