CVE-2009-0805: XSS
Cross-site scripting (XSS) vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the eventid parameter in index.php.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0805?
CVE-2009-0805 has a moderate severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2009-0805?
To fix CVE-2009-0805, upgrade the piCal module to version 0.91i or later where the vulnerability is patched.
What software is affected by CVE-2009-0805?
CVE-2009-0805 affects piCal versions 0.91h and earlier, which is a module for the XOOPS content management system.
Can CVE-2009-0805 lead to data theft?
Yes, CVE-2009-0805 can lead to data theft as attackers can inject malicious scripts that may capture sensitive user information.
How widespread is the use of piCal concerning CVE-2009-0805?
The usage of piCal varies, but any installations of version 0.91h or earlier are vulnerable to CVE-2009-0805 and should be assessed.