Cross-site scripting vulnerability in addevent.php in myEvent 1.x allows remote attackers to inject arbitrary web script or HTML via the event_desc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
Configurations
History
21 Nov 2024, 00:10
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/19680 - Vendor Advisory | |
References | () http://www.osvdb.org/24719 - | |
References | () http://www.vupen.com/english/advisories/2006/1384 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/25885 - |
Information
Published : 2006-04-20 18:06
Updated : 2025-04-03 01:03
NVD link : CVE-2006-1908
Mitre link : CVE-2006-1908
CVE.ORG link : CVE-2006-1908
JSON object : View
Products Affected
mywebland
- myevent
CWE