Vulnerability Details CVE-2006-6669
Cross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.2%
CVSS Severity
CVSS v2 Score 6.8
References
- http://secunia.com/advisories/23341
- http://secunia.com/advisories/24974
- http://securityreason.com/securityalert/2054
- http://www.debian.org/security/2007/dsa-1279
- http://www.securityfocus.com/archive/1/454810/100/0/threaded
- http://www.vupen.com/english/advisories/2006/5067
- http://secunia.com/advisories/23341
- http://secunia.com/advisories/24974
- http://securityreason.com/securityalert/2054
- http://www.debian.org/security/2007/dsa-1279
- http://www.securityfocus.com/archive/1/454810/100/0/threaded
- http://www.vupen.com/english/advisories/2006/5067
Products affected by CVE-2006-6669
-
cpe:2.3:a:webcalendar:webcalendar:1.0.4