CVE-2008-2507

CVE-2008-2507 concerns a cross-site scripting (XSS) vulnerability in Brown Bear Software Calcium 3.10 and 4.0.4 (Calcium40.pl). The issue arises in the ShowIt action where user-supplied input in the CalendarName parameter can be manipulated to inject arbitrary web script or HTML. The available do...

CVE-2006-0889

The CVE-2006-0889 entry describes a Cross-site Scripting (XSS) vulnerability in Calcium 3.10.1, exploitable through the EventText parameter to inject arbitrary script/HTML. Affected software: Calcium 3.10.1. Root cause: input handling in the EventText parameter allows script execution in the user...