EUVD-2006-0983

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in 1 index.cgi and 2 viewday.cgi...

CVE-2006-0980

CVE-2006-0980 concerns multiple XSS vulnerabilities in Jay Eckles CGI Calendar 2.7. The flaws allow an attacker to inject arbitrary web script or HTML via the year parameter in the scripts index.cgi and viewday.cgi. Affected component: CGI Calendar 2.7; entry points: index.cgi and viewday.cgi; ve...

CVE-2006-0980

Multiple cross-site scripting XSS vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in 1 index.cgi and 2 viewday.cgi...