CVE-2013-6163

Multiple cross-site scripting XSS vulnerabilities in ProjeQtOr formerly Project'Or RIA before 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 type parameter to view/parameter.php, 2 p1value parameter to view/main.php, or 3 objectClass parameter to view/objectDetail.p...

PT-2013-5953

Name of the Vulnerable Software and Affected Versions Project'Or RIA version 3.4.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the objectId parameter in the view/objectDetail.php file. Recommendations For Project'Or...

PT-2013-5952

Name of the Vulnerable Software and Affected Versions ProjeQtOr versions prior to 4.0.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the type parameter to "view/parameter.php", the p1value parameter to "view/main.php", or the...

CVE-2013-6164: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrary SQL commands via the objectId parameter...

CVE-2013-6163: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ProjeQtOr formerly Project'Or RIA before 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 type parameter to view/parameter.php, 2 p1value parameter to view/main.php, or 3 objectClass parameter to view/objectDetail.p...