exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

PHP-Calendar Cross Site Scripting

PHP-Calendar Cross Site Scripting
Posted May 22, 2010
Site vupen.com

PHP-Calendar versions 2.0 Beta6 and below suffers from a cross site scripting vulnerability.

tags | advisory, php, xss
SHA-256 | d5fa852e94e5374dec5cb4c91de169b742ee3655443d96352a69871de60dc695

PHP-Calendar Cross Site Scripting

Change Mirror Download
PHP-Calendar "description" and "lastaction" Cross Site Scripting 
Vulnerabilities


I. BACKGROUND
---------------------

"PHP-Calendar is a simple web calendar. It is targeted towards groups that
need to collaboratively create and track events. In that same collaborative
spirit, the source for PHP-Calendar is available under an open source
license
for anyone to use and modify." from php-calendar.com


II. VULNERABILITIES
---------------------

VUPEN Web Vulnerability Research Team discovered two vulnerabilities in
PHP-Calendar.

These issues are caused by input validation errors when processing the
"description" or "lastaction" parameter, which could be exploited by
attackers to cause arbitrary scripting code to be executed by the user's
browser in the security context of an affected Web site.


III. AFFECTED PRODUCTS
---------------------------

PHP-Calendar version 2.0 Beta6 and prior


IV. SOLUTION
----------------

Upgrade to PHP-Calendar version 2.0 Beta7


V. CREDIT
--------------

These vulnerabilities were discovered by Mohammed Boumediane (VUPEN
Security)
with help of the VUPEN Web Application Security Scanning (WASS) technology.


VI. VUPEN Web Application Security Scanner (WASS)
----------------------------------------------------

VUPEN Web Application Security Scanner (WASS) is a SaaS security scanning
technology which enables corporations and organizations to identify, track
and remediate security vulnerabilities affecting their web sites and
web applications, prevent criminals from gaining unauthorized access to
sensitive data, and comply with security requirements such as PCI.

VUPEN WASS is based on a proprietary technology developed by VUPEN security
experts, and combines black-box (smart and automated) and grey-box
(signature-based) scanning to accurately identify web vulnerabilities such
as those in the OWASP Top 10 including SQL injection and cross-site
scripting,
but also real-world vulnerabilities such as shell command injection and
file inclusion.

Read More: http://www.vupen.com/english/wass/


VII. REFERENCES
----------------------

http://www.vupen.com/english/advisories/2010/1202
http://php-calendar.blogspot.com/2010/05/php-calendar-20-beta7.html


VIII. DISCLOSURE TIMELINE
-----------------------------

2010-04-21 - Vendor notified
2010-05-21 - Coordinated public Disclosure


Login or Register to add favorites

File Archive:

May 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    44 Files
  • 2
    May 2nd
    5 Files
  • 3
    May 3rd
    11 Files
  • 4
    May 4th
    0 Files
  • 5
    May 5th
    0 Files
  • 6
    May 6th
    28 Files
  • 7
    May 7th
    3 Files
  • 8
    May 8th
    4 Files
  • 9
    May 9th
    54 Files
  • 10
    May 10th
    12 Files
  • 11
    May 11th
    0 Files
  • 12
    May 12th
    0 Files
  • 13
    May 13th
    17 Files
  • 14
    May 14th
    11 Files
  • 15
    May 15th
    17 Files
  • 16
    May 16th
    13 Files
  • 17
    May 17th
    22 Files
  • 18
    May 18th
    0 Files
  • 19
    May 19th
    0 Files
  • 20
    May 20th
    17 Files
  • 21
    May 21st
    18 Files
  • 22
    May 22nd
    7 Files
  • 23
    May 23rd
    111 Files
  • 24
    May 24th
    27 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    6 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close