CVE-2005-1145

CalendarScript 3.20 (CVE-2005-1145): XSS in calendar.pl via the template parameter; CalendarScript 3.21 (CVE-2005-1146): XSS in the login command via the username parameter. Both entries are disputed by the vendor. Exploitation context: remote injection of script/HTML. Remediation guidance from P...