Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-4327. PoCs published by Stan Bubrouski.
AI-analyzed exploit summary This exploit demonstrates multiple XSS vulnerabilities in WebCal 3.04 by injecting malicious scripts via unsanitized input parameters in the 'function', 'year', and 'date' fields. The PoC shows how attacker-supplied JavaScript can execute in the context of the affected site.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script or HTML via the (1) function, (2) year, and (3) date parameters to webcal.cgi, (4) new calendar entries, and (5) notes for entries.
Exploits (1)
This exploit demonstrates multiple XSS vulnerabilities in WebCal 3.04 by injecting malicious scripts via unsanitized input parameters in the 'function', 'year', and 'date' fields. The PoC shows how attacker-supplied JavaScript can execute in the context of the affected site.