CVE-2006-0180

Published: Jan 12, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags.

Affected (1)

Products: Calogic: Calogic Calendars

Calogic

1 product

Calogic Calendars

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Calogic Calogic Calendars	Version 1.2.2

References (14)

http://evuln.com/vulns/24/summary.html

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/18417

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/22322

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/422163/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16206

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0149

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24077

Source: cve@mitre.org

http://evuln.com/vulns/24/summary.html