CVE-2009-2241

Description

Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.

Affected products

• aaronoutpost / asp_inline_corporate_calendar

References

• MISChttp://www.securityfocus.com/bid/35054
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/50666
• EXPLOIThttp://www.exploit-db.com/exploits/8756
• VENDOR_ADVISORYhttp://secunia.com/advisories/35187