medium4.3Public exploit code
CVE-2005-0872
Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to inject arbitrary web…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Topic Calendar 1.0.1 - 'Calendar_Scheduler.php' Cross-Site Scripting2004-03-24 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in calendar_scheduler.php in the Topic Calendar 1.0.1 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the start parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpbb Group | Phpbb | Version 1.0.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111168190630576&w=2
- http://secunia.com/advisories/14659
- http://securitytracker.com/id?1013554
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19821
- http://marc.info/?l=bugtraq&m=111168190630576&w=2
- http://secunia.com/advisories/14659
- http://securitytracker.com/id?1013554
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19821