Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

XSS in ssLinks v1.22

XSS in PowerNews

[SA19392] Mambo AkoComment Module SQL Injection Vulnerabilities

[SA19423] Greymatter gm-upload.cgi File Upload Vulnerability

From:	Cyber Lords <fear_(at)_cyberlords.net>
Date:	28.03.2006
Subject:	XSS in Calendar Event 3.0

Advisory: XSS in Calendar Event 3.0

Уязвимость/Vulnerability:
Межсайтовый скриптинг/Cross Site Scripting

Уязвимый скрипт/Vulnerable script: index.php

http://demo.comdevweb.com/calendar/index.php?calview=year&year=2007">
<script>alert()</script><"

--------------------------
Cyber Lords Team
www.cyberlords.net

 

--
Best regards,
fear                          mailto:fear@cyberlords.net