CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-2041

Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7 allow remote attackers to inject arbitrary web script or HTML via the (1) description and (2) lastaction parameters.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 65.7%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2010-2041

Php-Calendar » Php-Calendar » Version: Any

cpe:2.3:a:php-calendar:php-calendar:*
Php-Calendar » Php-Calendar » Version: 0.1

cpe:2.3:a:php-calendar:php-calendar:0.1
Php-Calendar » Php-Calendar » Version: 0.10

cpe:2.3:a:php-calendar:php-calendar:0.10
Php-Calendar » Php-Calendar » Version: 0.2

cpe:2.3:a:php-calendar:php-calendar:0.2
Php-Calendar » Php-Calendar » Version: 0.3

cpe:2.3:a:php-calendar:php-calendar:0.3
Php-Calendar » Php-Calendar » Version: 0.4

cpe:2.3:a:php-calendar:php-calendar:0.4
Php-Calendar » Php-Calendar » Version: 0.5

cpe:2.3:a:php-calendar:php-calendar:0.5
Php-Calendar » Php-Calendar » Version: 0.6

cpe:2.3:a:php-calendar:php-calendar:0.6
Php-Calendar » Php-Calendar » Version: 0.7

cpe:2.3:a:php-calendar:php-calendar:0.7
Php-Calendar » Php-Calendar » Version: 0.8

cpe:2.3:a:php-calendar:php-calendar:0.8
Php-Calendar » Php-Calendar » Version: 0.9

cpe:2.3:a:php-calendar:php-calendar:0.9
Php-Calendar » Php-Calendar » Version: 0.9.1

cpe:2.3:a:php-calendar:php-calendar:0.9.1
Php-Calendar » Php-Calendar » Version: 1.1

cpe:2.3:a:php-calendar:php-calendar:1.1
Php-Calendar » Php-Calendar » Version: 2.0

cpe:2.3:a:php-calendar:php-calendar:2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-2041

Products

Pricing

Contact Us