NVD

Id
68557  
Name
CVE-2005-2882  
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the LocationID parameter to (1) thankyou.php or (2) day.php, font parameter to (3) calDaily.php, (4) calMonthly.php, (5) calMonthlyP.php, (6) calWeekly.php, (7) calWeeklyP.php, (8) calYearly.php, (9) calYearlyP.php, (10) day.php, or (11) week.php, or (12) CeTi, (13) Contact, (14) Description, (15) ShowAddress parameter to event.php, and other attack vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2005-09-14  
Modified Date
2017-07-10  
Seq
2005-2882  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
354301 68557 CVE-2005-2882 20050905 phpCommunityCalendar 4.0.3 (possibly prior versions) sql injection / login bypass / cross site scripting  View
354302 68557 CVE-2005-2882 http://rgod.altervista.org/phpccal.html  View
354303 68557 CVE-2005-2882 14767  View
354304 68557 CVE-2005-2882 phpcommunitycalendar-multiple-xss(22176)  View

Related JVN