CVE-2009-1218

CVE-2009-1218 describes multiple XSS vulnerabilities in Sun Calendar Server components (login.wcap fmt-out and command.shtml date) affecting Sun Calendar Express Web Server, Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6.0–6.3-7.01. The issue arises from improper input sanitiza...

CVE-2009-1218: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote attackers to inject arbitrary web script or HTML via 1 the fmt-out parameter to login.wcap or 2 the date...

CVE-2009-1219: Improper Input Validation

Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service daemon crash via multiple requests to the default URI with alphabetic characters in the tzid parameter...