CVE-2006-3240

CVE-2006-3240 is an XSS vulnerability in dotProject prior to 2.0.4 (2.0.3 and earlier) affecting the login flow via the login parameter in classes/ui.class.php. The underlying issue is a cross-site scripting exposure that could allow remote attackers to inject arbitrary script/HTML into a user’s ...