Security Advisory

CVE-2007-6274

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2007-12-07 11:00:00
Last updated 2024-08-07 16:02:35
Assigner mitre
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) day or (2) year parameter.