ID de Prueba:	1.3.6.1.4.1.25623.1.0.19749
Categoría:	Web application abuses
Título:	Calendar Express Multiple Flaws
Resumen:	The remote web server is using Calendar Express which is vulnerable to a cross; site scripting and SQL injection vulnerability.
Descripción:	Summary: The remote web server is using Calendar Express which is vulnerable to a cross site scripting and SQL injection vulnerability. Vulnerability Impact: A vulnerability exists in this version which may allow an attacker to execute arbitrary HTML and script code in the context of the user's browser, and SQL injection. An attacker may exploit these flaws to use the remote host to perform attacks against third-party users, or to execute arbitrary SQL statements on the remote SQL database. Solution: Upgrade to the latest version of this software. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3627 BugTraq ID: 14504 http://www.securityfocus.com/bid/14504
Copyright	Copyright (C) 2005 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.