CVE-2006-1967

CVE-2006-1967 describes a Cross-site scripting (XSS) vulnerability in the calendar/Visitor.cgi component of KCScripts Calendar (distributed standalone and as part of Portal Pack 6.0 and earlier). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the sort_order p...