PHP Event Calendar 1.5 Cross Site Request Forgery / Cross Site Scripting / Traversal

Title: PHP Event Calendar = v1.5 Multiple Vulnerabilities Author: cp77fk4r | Empty0pagESHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://www.softcomplex.com/download.html Version: = v1.5 Tested on: Apache2+PHP5 on Win32 Cross Site Scripting Cross-Site Scripting attacks are a type ...

Cross site scripting

Cross-site scripting XSS vulnerability in Softcomplex PHP Event Calendar 1.5 allows remote authenticated users to inject arbitrary web script or HTML, and corrupt data, via the 1 username and 2 password parameters, which are not sanitized before being written to users.php. NOTE: while this issue...