CVE-2007-2819

CVE-2007-2819 is a cross-site scripting (XSS) vulnerability in Track+ versions up to 3.3.2, exploitable via the projId parameter in reportItem.do. The affected software is Track+, and the root cause is the injection of arbitrary web script or HTML. The connected documents confirm the vulnerabilit...

CVE-2007-2819: Undefined Security Weakness

Cross-site scripting XSS vulnerability in reportItem.do in Track+ 3.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the projId parameter...