forums.avenir-geopolitique.net
http://forums.avenir-geopolitique.net/viewtopic.php?t=2686 CVE-2007-1050
AbleDesign MyCalendar 2.20.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Record summary
CVE-2007-1050 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inject arbitrary web script or HTML via (1) the go parameter, (2) the keyword parameter in the search menu (go=search), or (3) the username or (4) the password in a go=Login action.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBAbleDesign MyCalendar 2.20.3 - 'index.php' Multiple Cross-Site Scripting VulnerabilitiesExploitDB exploitby sn0oPyNot analyzed1 file
References
1133317vdb entry
http://osvdb.org/33317 33318vdb entry
http://osvdb.org/33318 33319vdb entry
http://osvdb.org/33319 24222Third-party advisory
http://secunia.com/advisories/24222 2270Third-party advisory
http://securityreason.com/securityalert/2270 20070219 MyCalendar multiple XSSmailing list
http://www.securityfocus.com/archive/1/460598/100/0/threaded 22635vdb entry
http://www.securityfocus.com/bid/22635 ADV-2007-0679vdb entry
http://www.vupen.com/english/advisories/2007/0679 mycalendar-index-xss(32581)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/32581 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-1050