CVE-2006-1908

CVE-2006-1908 affects the myEvent 1.x web application. The core issue is a cross-site scripting vulnerability in addevent.php’s event_desc parameter, enabling injection of arbitrary script/HTML. Connected sources also describe additional flaws in the same product: unsanitized input to myevent_pat...