Unscored severity · published Mar 21, 2006
CVE-2006-1336
Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the…
–
CVSS
6.7%
EPSS
No
On KEV
Description
Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) year, (2) month, (3) next, and (4) prev parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.7% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EX
Extcalendar · Extcalendar
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1336
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1336
secunia.com
http://secunia.com/advisories/19321
securityreason.com
http://securityreason.com/securityalert/601
www.osvdb.org
http://www.osvdb.org/23969
www.securityfocus.com
http://www.securityfocus.com/archive/1/428131/100/0/threaded
Exploit
http://www.securityfocus.com/bid/17146
www.vupen.com
http://www.vupen.com/english/advisories/2006/1012
More from Extcalendar
–
CVE-2006-3556
PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the…