VendorsPostnuke Software Foundationpostcalendarall versions
Vulnerabilities

Postnuke Software Foundation Postcalendar

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2002-0739
Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page.
Published 2002-07-26 · Modified
7.5EPSS 0.018
CVE-2004-1787
SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.
Published 2005-05-10 · Modified
7.5EPSS 0.013