Unrated severityNVD Advisory· Published Feb 26, 2007· Updated Jun 16, 2026
CVE-2007-1111
CVE-2007-1111
Description
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the css parameter to (1) flatevents.php, (2) js.php, (3) mysqlevents.php, (4) m_2.php, (5) m_3.php, (6) m_4.php, (7) xmlevents.php, (8) y_2.php, or (9) y_3.php in data/.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:activecalendar:activecalendar:1.2.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:activecalendar:activecalendar:1.2.0:*:*:*:*:*:*:*
- (no CPE)range: 1.2.0
Patches
Vulnerability mechanics
References
15- www.securityfocus.com/bid/22705nvdExploit
- securityreason.com/securityalert/2299nvd
- www.osvdb.org/33145nvd
- www.osvdb.org/33146nvd
- www.osvdb.org/33147nvd
- www.osvdb.org/33148nvd
- www.osvdb.org/33149nvd
- www.osvdb.org/33150nvd
- www.osvdb.org/33151nvd
- www.osvdb.org/33152nvd
- www.osvdb.org/33153nvd
- www.securityfocus.com/archive/1/461146/100/0/threadednvd
- www.securityfocus.com/archive/1/461313/100/0/threadednvd
- www.vupen.com/english/advisories/2007/0759nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/32690nvd
News mentions
0No linked articles in our index yet.