CVE-2006-4206 Cross-site scripting (XSS) vulnerability in calendar.asp in ASPPlayground.NET Forum Advanced Edition 2.4.5 Unicode, and possibly other versions before October 15, 2006, allows remote attackers to inje...
MediumCVSS 4.3
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in calendar.asp in ASPPlayground.NET Forum Advanced Edition 2.4.5 Unicode, and possibly other versions before October 15, 2006, allows remote attackers to inject arbitrary web script or HTML via the calendarID parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aspplayground.net | = 2.4.5 | No fix listed |
References
- nvd.nist.gov us-government-resource
- 1405 third-party-advisory
- 29232 vdb-entry
- 20060811 Forum Software (c) ASPPlayground.NET Advanced Edition 2.4.5 Unicode Xss mailing-list
- 20335 vdb-entry
- aspplaygroundnet-calendar-xss(28352) vdb-entry