CVE

Id
38653  
CVE No.
CVE-2009-1218  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote attackers to inject arbitrary web script or HTML via (1) the fmt-out parameter to login.wcap or (2) the date parameter to command.shtml.  
Phase
Assigned (20090401)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
423291 38653 CVE-2009-1218 BUGTRAQ:20090331 CORE-2009-0108: Multiple vulnerabilities in Sun Calendar Express Web Server  View
423292 38653 CVE-2009-1218 URL:http://www.securityfocus.com/archive/1/archive/1/502320/100/0/threaded  View
423293 38653 CVE-2009-1218 MISC:http://www.coresecurity.com/content/sun-calendar-express  View
423294 38653 CVE-2009-1218 SUNALERT:256228  View
423295 38653 CVE-2009-1218 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-256228-1  View
423296 38653 CVE-2009-1218 SUNALERT:1020321  View
423297 38653 CVE-2009-1218 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020321.1-1  View
423298 38653 CVE-2009-1218 BID:34152  View
423299 38653 CVE-2009-1218 URL:http://www.securityfocus.com/bid/34152  View
423300 38653 CVE-2009-1218 BID:34153  View
423301 38653 CVE-2009-1218 URL:http://www.securityfocus.com/bid/34153  View
423302 38653 CVE-2009-1218 VUPEN:ADV-2009-0905  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44922 JVNDB-2009-005929 webEdition の index.php におけるディレクトリトラバーサルの脆弱性 webEdition の index.php には、register_globals が有効、および magic_quotes_gpc が無効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-1222 38653 5.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005929.html  View