CVE-2006-2291

Cross-site scripting XSS vulnerability in calendarnew.asp in IA-Calendar allows remote attackers to inject arbitrary web script or HTML via the TypeName1 parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in calendarnew.asp in IA-Calendar allows remote attackers to inject arbitrary web script or HTML via the TypeName1 parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-2292

CVE-2006-2292 involves multiple SQL injection vulnerabilities in IA-Calendar. The affected components are the web interfaces calendar_new.asp (type parameter) and default.asp, and calendar_detail.asp (ID parameter). The underlying flaw allows remote attackers to craft input that could execute arb...