Vulnerabilities > CVE-2005-4327 - HTML Injection and Cross-Site Scripting vulnerability in WebCal

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
webcal
exploit available
NVD
Published: 2005-12-17
Updated: 2018-10-19

Summary

Multiple cross-site scripting (XSS) vulnerabilities in Michael Arndt WebCal 1.11-3.04 allow remote attackers to inject arbitrary web script or HTML via the (1) function, (2) year, and (3) date parameters to webcal.cgi, (4) new calendar entries, and (5) notes for entries.

Vulnerable Configurations

Part Description Count
Application
Webcal
1

Exploit-Db

descriptionWebCal 3.0 4 webcal.cgi Multiple Parameter XSS. CVE-2005-4327. Webapps exploit for cgi platform
idEDB-ID:26865
last seen2016-02-03
modified2005-12-16
published2005-12-16
reporterStan Bubrouski
sourcehttps://www.exploit-db.com/download/26865/
titleWebCal 3.0 4 webcal.cgi Multiple Parameter XSS

References