PHPLite Calendar Express Cross Site Scripting and SQL Injection

* Technical Description *

Two vulnerabilities were identified in PHPLite Calendar Express, which could be exploited by attackers to perform SQL injection or cross site scripting.

The first issue is due to an input validation error in the "search.php" script when processing a specially crafted "allwords" parameter, which may be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser.

The second vulnerability is due to input validation errors in several scripts that do not properly filter a specially crafted "cid" variable, which may be exploited by remote users to conduct SQL injection attacks.

* Affected Products *

PHPLite Calendar Express version 2.0 and prior

* Solution *

No official supplied patch for this issue.

* References *

http://www.frsirt.com/english/advisories/2005/1341