CVE-2008-2507 Cross-site scripting (XSS) vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the CalendarName parameter in....
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the CalendarName parameter in a ShowIt action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| brown bear software calcium | = 3.10 | No fix listed |
| brown bear software calcium | = 4.0.4 | No fix listed |
References
- 30431 exploit third-party-advisory vendor-advisory
- 20080528 Calcium web calendar: Reflected XSS mailing-list
- 29411 exploit vdb-entry
- calcium-calcium40-xss(42704) vdb-entry