CVE-2008-5061

CVE-2008-5061 is a Cross-site Scripting (XSS) vulnerability in Mini Web Calendar (mwcal) 1.2, specifically in php/cal_default.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the URL, impacting only the client-side confidentiality/integrity depending on the context...

CVE-2008-5062

CVE-2008-5062 is a directory traversal vulnerability reported in Mini Web Calendar (mwcal) 1.2, affecting the PHP file php/cal_pdf.php . The underlying issue allows remote attackers to read arbitrary files via directory traversal sequences in the parameter thefile . Public references (NVD, CVE li...

CVE-2008-5061: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in php/caldefault.php in Mini Web Calendar mwcal 1.2 allows remote attackers to inject arbitrary web script or HTML via the URL...