CVEvulnerability
CVE-2007-1234
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-03-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in sitex allow remote attackers to inject arbitrary web script or HTML via (1) the sxYear parameter to calendar.php, (2) the search parameter to search.php, (3) the linkid parameter to redirect.php, or (4) the page parameter to calendar_events.php.
Affected configurations
• bj sintay sitex 0.7.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/33158 osvdb.org
- http://osvdb.org/33159 osvdb.org
- http://osvdb.org/33160 osvdb.org
- http://osvdb.org/33161 osvdb.org
- http://securityreason.com/securityalert/2373 securityreason.com
- http://www.securityfocus.com/archive/1/461305/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/465849/100/200/threaded www.securityfocus.com
- http://osvdb.org/33158 osvdb.org
- http://osvdb.org/33159 osvdb.org
- http://osvdb.org/33160 osvdb.org
- http://osvdb.org/33161 osvdb.org
- http://securityreason.com/securityalert/2373 securityreason.com
- http://www.securityfocus.com/archive/1/461305/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/465849/100/200/threaded www.securityfocus.com