EUVD-2006-0893

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in Calcium 3.10.1 allows remote attackers to inject arbitrary web script or HTML via the EventText parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0889

Cross-site scripting XSS vulnerability in Calcium 3.10.1 allows remote attackers to inject arbitrary web script or HTML via the EventText parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0889

The CVE-2006-0889 entry describes a Cross-site Scripting (XSS) vulnerability in Calcium 3.10.1, exploitable through the EventText parameter to inject arbitrary script/HTML. Affected software: Calcium 3.10.1. Root cause: input handling in the EventText parameter allows script execution in the user...