Test ID:	1.3.6.1.4.1.25623.1.0.902190
Category:	Web application abuses
Title:	PHP-Calendar 'description' and 'lastaction' Cross Site Scripting Vulnerabilities
Summary:	PHP-Calendar is prone to Cross Site Scripting vulnerabilities.
Description:	Summary: PHP-Calendar is prone to Cross Site Scripting vulnerabilities. Vulnerability Insight: The flaws are due to input validation errors when processing the 'description' and 'lastaction' parameters. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary script code. Affected Software/OS: PHP-Calendar version 2.0 Beta6 and prior on all platforms. Solution: Upgrade PHP-Calendar to 2.0 Beta7 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2041 BugTraq ID: 40334 http://www.securityfocus.com/bid/40334 Bugtraq: 20100521 PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/511395/100/0/threaded http://packetstormsecurity.org/1005-advisories/phpcalendar-xss.txt http://secunia.com/advisories/33899 http://www.vupen.com/english/advisories/2010/1202 XForce ISS Database: phpcalendar-description-xss(58861) https://exchange.xforce.ibmcloud.com/vulnerabilities/58861
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.