CVE-2008-1906

Cross-site scripting (XSS) vulnerability in calendar.php in cpCommerce 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in a view.year action.

Date published : 2008-04-21

http://www.securityfocus.com/bid/28755

https://www.exploit-db.com/exploits/5437