Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.17613
Category:Web application abuses
Title:Topic Calendar XSS
Summary:The remote web server is running Topic Calendar, a module for phpBB which adds; calendaring support to phpBB. This script is vulnerable to a cross site scripting issue.
Description:Summary:
The remote web server is running Topic Calendar, a module for phpBB which adds
calendaring support to phpBB. This script is vulnerable to a cross site scripting issue.

Vulnerability Impact:
Due to improper filtering done by the script 'calendar_scheduler.php' a
remote attacker can cause the Topic Calendar product to include arbitrary HTML and/or JavaScript.

Solution:
Disable this module or upgrade to a newer version

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2005-0872
Bugtraq: 20050324 Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB (Google Search)
http://marc.info/?l=bugtraq&m=111168190630576&w=2
http://securitytracker.com/id?1013554
http://secunia.com/advisories/14659
XForce ISS Database: topic-calendar-start-xss(19821)
https://exchange.xforce.ibmcloud.com/vulnerabilities/19821
CopyrightCopyright (C) 2005 Noam Rathaus

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.