CVE

Id
14088  
CVE No.
CVE-2005-2882  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the LocationID parameter to (1) thankyou.php or (2) day.php, font parameter to (3) calDaily.php, (4) calMonthly.php, (5) calMonthlyP.php, (6) calWeekly.php, (7) calWeeklyP.php, (8) calYearly.php, (9) calYearlyP.php, (10) day.php, or (11) week.php, or (12) CeTi, (13) Contact, (14) Description, (15) ShowAddress parameter to event.php, and other attack vectors.  
Phase
Assigned (20050914)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
104096 14088 CVE-2005-2882 BUGTRAQ:20050905 phpCommunityCalendar 4.0.3 (possibly prior versions) sql injection / login bypass / cross site scripting  View
104097 14088 CVE-2005-2882 URL:http://marc.info/?l=bugtraq&m=112605610624004&w=2  View
104098 14088 CVE-2005-2882 MISC:http://rgod.altervista.org/phpccal.html  View
104099 14088 CVE-2005-2882 BID:14767  View
104100 14088 CVE-2005-2882 URL:http://www.securityfocus.com/bid/14767  View
104101 14088 CVE-2005-2882 SECUNIA:16721  View
104102 14088 CVE-2005-2882 URL:http://secunia.com/advisories/16721/  View
104103 14088 CVE-2005-2882 XF:phpcommunitycalendar-multiple-xss(22176)  View

Related JVN