CVE-2006-6669 - Cross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter

Published Dec 20, 2006

6.8

MEDIUM

CVSS 2.0

EPSS 1.44%

Description

Cross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://secunia.com/advisories/23341
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/24974
third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/2054
third-party-advisoryx_refsource_SREASON
http://www.debian.org/security/2007/dsa-1279
vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/archive/1/454810/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2006/5067
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6652
Advisory

Link	Providers	Tags
http://secunia.com/advisories/23341		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/24974		third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/2054		third-party-advisoryx_refsource_SREASON
http://www.debian.org/security/2007/dsa-1279		vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/archive/1/454810/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2006/5067		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6652		Advisory