Summary
The remote web server contains a PHP script which is vulnerable to a cross site scripting issue.
Description :
The remote host is running Topic Calendar, a module for phpBB which adds calendaring support to phpBB.
Due to improper filtering done by the script 'calendar_scheduler.php' a remote attacker can cause the Topic Calendar product to include arbitrary HTML and/or JavaScript.
Solution
Disable this module or upgrade to a newer version
Severity
Classification
-
CVE CVE-2005-0872 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities