← Database

CVE-2006-0980

MEDIUM CVSS: 4.3 Published: 2006-03-03 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in (1) index.cgi and (2) viewday.cgi.

Affected Platforms

Jay Eckles Cgi Calendar

Weakness Type

NVD-CWE-Other

References