Cross site scripting

2010-01-1520:30:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.5%

JSON

Cross-site scripting (XSS) vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: this issue could not be reproduced by the vendor, but a patch was provided anyway. The original researcher is reliable.

CPENameOperatorVersion
webcalenderc3le0.32
webcalenderc3eq0.31
webcalenderc3eq0.31 s2

Name	Operator	Version
webcalenderc3	le	0.32
webcalenderc3	eq	0.31
webcalenderc3	eq	0.31 s2

References

jvn.jp/en/jp/JVN33977065/index.html

jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000002.html

secunia.com/advisories/38135

webcal.c-3.jp/zeijakusei.html

www.osvdb.org/61629