CVE-2010-0349

CVE-2010-0349 concerns the WebCalenderC3 web calendar from C3 Corp. A cross-site scripting (XSS) flaw exists in WebCalenderC3 v0.32 and earlier, with the vendor unable to reproduce it but a patch/security-enhanced version was released. The vulnerability may allow arbitrary script execution in a u...

CVE-2010-0348

CVE-2010-0348 concerns WebCalenderC3 by C3 Corp. (0.32 and earlier). The vulnerability is a directory traversal flaw that could let a remote attacker read arbitrary files on the server via unknown vectors. Public sources (JVN/NVD) confirm the affected product and version range; no exploitation de...