CVE-2013-6163

ProjeQtOr (Project'Or RIA) before 4.0.0 contains multiple XSS vulnerabilities that allow remote attackers to inject arbitrary HTML/script via parameters: type (view/parameter.php), p1value (view/main.php), and objectClass (view/objectDetail.php). Root cause: unsanitized input reflected into pages...

Project'Or RIA 3.4.0 Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2013-018 - Original release date: July 26th, 2013 - Last revised: July 26th, 2013 - Discovered by: Vicente Aguilera Diaz - Severity: 4.3/10 CVSSv2 Base Scored - CVE-ID: CVE-2013-6163...