CVE-2007-1050

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inject arbitrary web script or HTML via (1) the go parameter, (2) the keyword parameter in the search menu (go=search), or (3) the username or (4) the password in a go=Login action.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/32581

http://www.vupen.com/english/advisories/2007/0679

http://www.securityfocus.com/bid/22635

http://www.securityfocus.com/archive/1/460598/100/0/threaded

http://securityreason.com/securityalert/2270

http://secunia.com/advisories/24222

http://osvdb.org/33319

http://osvdb.org/33318

http://osvdb.org/33317

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS