CVE-2009-2241 - Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web script or HTML via the keyword parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web script or HTML via the keyword parameter

Published Jun 27, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 1.45%

Description

Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://secunia.com/advisories/35187
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/8756
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/35054
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2237
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50666
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/35187		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/8756		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/35054		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2237		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50666		vdb-entryx_refsource_XF