CVE-2006-2798

CVE-2006-2798 involves multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3. The flaws allow remote attackers to inject arbitrary script/HTML via the LoName parameter in week.php and month.php, and via the AddressLink parameter in event.php. The NVD entry lists a base...