Vulnerabilities > CVE-2006-1508 - Cross-Site Scripting vulnerability in MH Software Connect Daily 3.2.8

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
mh-software
exploit available
NVD
Published: 2006-03-30
Updated: 2017-07-20

Summary

Multiple cross-site scripting (XSS) vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) calendar_id, (2) style_sheet, and (3) start parameters in (a) ViewDay.html; the (4) txtSearch and (5) opgSearch parameters in (b) ViewSearch.html; the (6) calendar_id and (7) approved parameters in (c) ViewYear.html; the (8) item_type_id parameter in (d) ViewCal.html; and the (9) week parameter in (e) ViewWeek.html.

Vulnerable Configurations

Part Description Count
Application
Mh_Software
2

Exploit-Db

  • descriptionConnect Daily 3.2.8/3.2.9 ViewSearch.html Multiple Parameter XSS. CVE-2006-1508. Webapps exploit for php platform
    idEDB-ID:27503
    last seen2016-02-03
    modified2006-03-28
    published2006-03-28
    reporterr0t
    sourcehttps://www.exploit-db.com/download/27503/
    titleConnect Daily 3.2.8/3.2.9 ViewSearch.html Multiple Parameter XSS
  • descriptionConnect Daily 3.2.8/3.2.9 ViewDay.html Multiple Parameter XSS. CVE-2006-1508. Webapps exploit for php platform
    idEDB-ID:27502
    last seen2016-02-03
    modified2006-03-28
    published2006-03-28
    reporterr0t
    sourcehttps://www.exploit-db.com/download/27502/
    titleConnect Daily 3.2.8/3.2.9 ViewDay.html Multiple Parameter XSS
  • descriptionConnect Daily 3.2.8/3.2.9 ViewWeek.html week Parameter XSS. CVE-2006-1508. Webapps exploit for php platform
    idEDB-ID:27506
    last seen2016-02-03
    modified2006-03-28
    published2006-03-28
    reporterr0t
    sourcehttps://www.exploit-db.com/download/27506/
    titleConnect Daily 3.2.8/3.2.9 ViewWeek.html week Parameter XSS
  • descriptionConnect Daily 3.2.8/3.2.9 ViewYear.html Multiple Parameter XSS. CVE-2006-1508. Webapps exploit for php platform
    idEDB-ID:27504
    last seen2016-02-03
    modified2006-03-28
    published2006-03-28
    reporterr0t
    sourcehttps://www.exploit-db.com/download/27504/
    titleConnect Daily 3.2.8/3.2.9 ViewYear.html Multiple Parameter XSS
  • descriptionConnect Daily 3.2.8/3.2.9 ViewCal.html item_type_id Parameter XSS. CVE-2006-1508. Webapps exploit for php platform
    idEDB-ID:27505
    last seen2016-02-03
    modified2006-03-28
    published2006-03-28
    reporterr0t
    sourcehttps://www.exploit-db.com/download/27505/
    titleConnect Daily 3.2.8/3.2.9 ViewCal.html item_type_id Parameter XSS

References