Test ID:	1.3.6.1.4.1.25623.1.0.19749
Category:	Web application abuses
Title:	Calendar Express Multiple Flaws
Summary:	The remote web server is using Calendar Express which is vulnerable to a cross; site scripting and SQL injection vulnerability.
Description:	Summary: The remote web server is using Calendar Express which is vulnerable to a cross site scripting and SQL injection vulnerability. Vulnerability Impact: A vulnerability exists in this version which may allow an attacker to execute arbitrary HTML and script code in the context of the user's browser, and SQL injection. An attacker may exploit these flaws to use the remote host to perform attacks against third-party users, or to execute arbitrary SQL statements on the remote SQL database. Solution: Upgrade to the latest version of this software. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3627 BugTraq ID: 14504 http://www.securityfocus.com/bid/14504
Copyright	Copyright (C) 2005 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.