CVE-2010-0349

MEDIO 4.3CVE-2010-0349 · Published 15/01/2010 · updated 16/06/2026

En resumen

CVE-2010-0349 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a webcalenderc3 (c-3.co.jp).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 64.9% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
webcalenderc3 c-3.co.jp	`= 0.31≤ 0.32`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: this issue could not be reproduced by the vendor, but a patch was provided anyway. The original researcher is reliable.

References

jvn.jp/en/jp/JVN33977065/index.html
jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000002.html
secunia.com/advisories/38135 · Vendor Advisory
webcal.c-3.jp/zeijakusei.html · Vendor Advisory
osvdb.org/61629

Más vulnerabilidades de webcalenderc3

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free