4 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in dotProject before 2.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2006-2851 and CVE-2006-3240...
CVE-2007-3226
Cross-site scripting XSS vulnerability in dotProject before 2.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2006-2851 and CVE-2006-3240...
CVE-2006-2851
Cross-site scripting XSS vulnerability in index.php in dotProject 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, which are not properly handled when the client is using Internet Explorer...
CVE-2006-2851
dotProject 2.0.2 and earlier contains a Cross-site Scripting (XSS) vulnerability in index.php, exploitable via unspecified parameters, with IE affected and potential for executing arbitrary script or HTML in the victim’s browser. The issue stems from parameters not being properly handled client-s...