Unscored severity · published Aug 21, 2009
CVE-2008-7018
Cross-site scripting (XSS) vulnerability in NashTech Easy PHP Calendar 6.3.25 allows remote attackers to inject arbitrary web script or HTML via the Details field (descr…
–
CVSS
1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in NashTech Easy PHP Calendar 6.3.25 allows remote attackers to inject arbitrary web script or HTML via the Details field (descr parameter) in an Add New Event action in an unspecified request as generated by an add action in index.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
Easy Php Calendar · Nashtech
6.3.25 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-7018
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-7018
www.securityfocus.com
http://www.securityfocus.com/archive/1/496796
www.securityfocus.com
http://www.securityfocus.com/bid/31478
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/45517
More from Easy Php Calendar
–
CVE-2013-1955
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject…