CVE-2007-3259: Undefined Security Weakness

Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via 1 an invalid month parameter to calendar.php, 2 an invalid catview parameter to calweek.php in a week operation, 3 an invalid ycyear parameter to yearcal.php, or 4 a direct request to calfunctions.inc.php, which...

CVE-2006-1835: Undefined Security Weakness

Cross-site scripting XSS vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web script or HTML via the ycyear parameter...

Calendarix "yearcal.php" XSS Attacking

Website : http://www.calendarix.com Vulnerable : if !isset$GET'ycyear' $ycyear = $y ; else $ycyear = $GET'ycyear'; http://www.site.com/path/yearcal.php?ycyear=scriptalertdocument.cookie/script...