CVEvulnerability
CVE-2007-6696
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2008-02-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:N/AC:H/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.1.6 allow remote attackers to inject arbitrary web script or HTML via (1) an event description, (2) the query string to pref.php, and (3) the adv parameter to search.php. NOTE: vector 1 requires user authentication.
Affected configurations
• webcalendar webcalendar 1.1.6
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/41274 osvdb.org
- http://osvdb.org/41275 osvdb.org
- http://osvdb.org/41276 osvdb.org
- http://www.digitrustgroup.com/advisories/web-application-security-webcalendar.html Exploit
- http://www.securityfocus.com/bid/27461 Exploit
- http://osvdb.org/41274 osvdb.org
- http://osvdb.org/41275 osvdb.org
- http://osvdb.org/41276 osvdb.org
- http://www.digitrustgroup.com/advisories/web-application-security-webcalendar.html Exploit
- http://www.securityfocus.com/bid/27461 Exploit