webcalendar: cross-site scripting
| Package(s): | webcalendar | CVE #(s): | CVE-2006-6669 | ||||
| Created: | April 23, 2007 | Updated: | April 25, 2007 | ||||
| Description: | A cross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter. | ||||||
| Alerts: |
| ||||||