CVE-2008-5061

CVE-2008-5061 is a Cross-site Scripting (XSS) vulnerability in Mini Web Calendar (mwcal) 1.2, specifically in php/cal_default.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the URL, impacting only the client-side confidentiality/integrity depending on the context...

CVE-2008-5062

CVE-2008-5062 is a directory traversal vulnerability reported in Mini Web Calendar (mwcal) 1.2, affecting the PHP file php/cal_pdf.php . The underlying issue allows remote attackers to read arbitrary files via directory traversal sequences in the parameter thefile . Public references (NVD, CVE li...