CVE-2007-0952

CVE-2007-0952 describes multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar. The issues allow remote attackers to inject arbitrary browser script or HTML via the (1) t and (2) yr parameters, and the (3) sho parameter when the m parameter is outside the intended r...