CVE:CVE-2006-3025
CNNVD:CNNVD-200606-317
Chris Lea Lucid Calendar 0.22中的Cal.PHP3存在跨站脚本攻击(XSS)漏洞。远程攻击者可以借助未明参数注入任意Web脚本或HTML。
solution:Upgrade lucid_designs lucid_calendar to a higher version than 0.22,and avoid the version 0.22