CVE-2006-6824

Published: 29/12/2006 Updated: 17/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 470

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) getdate parameter in (a) day.php, (b) month.php, (c) year.php, (d) week.php, (e) search.php, (f) rss/index.php, (g) print.php, and (h) preferences.php; the (2) cpath parameter in (i) day.php, (j) month.php, (k) year.php, (l) week.php, and (m) search.php; the (3) query parameter in search.php; and possibly the cpath, (4) unset, and (5) set parameters in a setcookie action in preferences.php; different vectors than CVE-2006-3319. NOTE: it was later reported that vectors b, c, and d also affect 2.24.

Vulnerable Product	Search on Vulmon	Subscribe to Product
php icalendar php icalendar
php icalendar php icalendar 1.1
php icalendar php icalendar 2.2_beta
php icalendar php icalendar 2.22
php icalendar php icalendar 2.24

source: wwwsecurityfocuscom/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user This may help the attacke ...

source: wwwsecurityfocuscom/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user This may help the attacker stea ...

source: wwwsecurityfocuscom/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user This may help the att ...

source: wwwsecurityfocuscom/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user This may help the attac ...

source: wwwsecurityfocuscom/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user This may help the attacker steal ...

source: wwwsecurityfocuscom/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user This may help the attacker st ...

source: wwwsecurityfocuscom/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user This may help the attacker steal co ...

source: wwwsecurityfocuscom/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user This may help the attacker ...

CWE-79 http://lostmon.blogspot.com/2006/12/php-icalendar-multiple-variable-cross.html http://www.securityfocus.com/bid/21792 http://securitytracker.com/id?1017449 http://secunia.com/advisories/23499 http://www.osvdb.org/32493 http://www.osvdb.org/32494 http://www.osvdb.org/32495 http://www.osvdb.org/32496 http://www.osvdb.org/32497 http://www.osvdb.org/32498 http://www.osvdb.org/32499 http://www.osvdb.org/32500 https://exchange.xforce.ibmcloud.com/vulnerabilities/31146 http://www.securityfocus.com/archive/1/485397/100/200/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/29368/

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook