Unrated severityNVD Advisory· Published May 31, 2005· Updated Jun 16, 2026
CVE-2005-1866
CVE-2005-1866
Description
Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter.
Affected products
2- cpe:2.3:a:vincent_hor:calendarix_advanced:1.5:*:*:*:*:*:*:*
- Range: =1.5
Patches
Vulnerability mechanics
References
3- archives.neohapsis.com/archives/bugtraq/2005-05/0356.htmlnvdExploitVendor Advisory
- securitytracker.com/alerts/2005/May/1014083.htmlnvdExploitVendor Advisory
- www.osvdb.org/16973nvdVendor Advisory
News mentions
0No linked articles in our index yet.