CVE-2006-0980

Published: Mar 3, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in (1) index.cgi and (2) viewday.cgi.

Affected (1)

Products: Jay Eckles: Cgi Calendar

Jay Eckles

1 product

Cgi Calendar

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jay Eckles Cgi Calendar	Version 2.7

References (8)

http://secunia.com/advisories/19066

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/426198/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0764

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24946

Source: cve@mitre.org

http://secunia.com/advisories/19066

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/426198/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0764

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24946

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.