CVE-2006-3521: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index/siteforge-bugs-action/proj.siteforge in SiteForge Collaborative Development Platform 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 status, 2 extra1, 3 extra2, or 4 extra3 parameters...

CVE-2006-3521

The CVE describes multiple cross-site scripting (XSS) vulnerabilities in SiteForge Collaborative Development Platform, specifically in index/siteforge-bugs-action/proj.siteforge, affecting version 1.0.4 and earlier. The issue arises from unescaped user-controlled input via the parameters _status,...