CVE-2006-1336: Undefined Security Weakness

Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 year, 2 month, 3 next, and 4 prev parameters...

ExtCalendar v1.0 Multiple Xss Vuln

------------------------------------------ ExtCalendar v1.0 Multiple Xss Vuln ------------------------------------------ Bug: http://victim/path/calendar.php?op=cal&month=3&year="scriptalert/Soot//script http://victim/path/calendar.php?op=cal&month="scriptalert/Soot//script&year=2006...

Extcalendar 1.0 - Cross-Site Scripting

Extcalendar 1.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/17146/info ExtCalendar is prone to four cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to ha...

Extcalendar 1.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/17146/info ExtCalendar is prone to four cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in th...