CVE-2007-6365

Cross-site scripting (XSS) vulnerability in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 allows remote attackers to inject arbitrary web script or HTML via the month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: the day and year vectors are covered by CVE-2007-6274.

• CWE-79

• http://secunia.com/advisories/26945Vendor Advisory
• http://secunia.com/advisories/26945Vendor Advisory

Published

Dec 15, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-6359The cs_validate_page function in bsd/kern/ubc_subr.c in the …
• CVE-2007-6360Unspecified vulnerability in the Sun eXtended System Control…
• CVE-2007-6361Gekko 0.8.2 and earlier stores sensitive information under t…
• CVE-2007-6362SQL injection vulnerability in index.php in the RSGallery (c…
• CVE-2007-6363IBM Tivoli Netcool Security Manager 1.3.0 before Interim Fix…
• CVE-2007-6364Cross-site scripting (XSS) vulnerability in modificarPerfil.…
• CVE-2007-6366Multiple SQL injection vulnerabilities in SineCMS 2.3.4 and …
• CVE-2007-6367Multiple cross-site scripting (XSS) vulnerabilities in the g…
• CVE-2007-6368Directory traversal vulnerability in index.php in ezContents…
• CVE-2007-6369Multiple directory traversal vulnerabilities in resize.php i…
• CVE-2007-6370Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-6371Nokia N95 cell phone with RM-159 12.0.013 firmware allows re…