EUVD-2007-4248

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 projectIssueId parameter in EditProjectIssue.do, the 2 projectId parameter in ProjectSelected.do, the 3 folderId parameter in...

CVE-2007-4265

Multiple cross-site scripting XSS vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 projectIssueId parameter in EditProjectIssue.do, the 2 projectId parameter in ProjectSelected.do, the 3 folderId parameter in...

CVE-2007-4265

VisionProject 3.1 and earlier suffer multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via specific parameters: projectIssueId (EditProjectIssue.do), projectId (ProjectSelected.do), folderId (ProjectDocuments.do), and sortField ...

CVE-2007-4265

Multiple cross-site scripting XSS vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 projectIssueId parameter in EditProjectIssue.do, the 2 projectId parameter in ProjectSelected.do, the 3 folderId parameter in...

VisionProject Multiple XSS vuln.

VisionProject Multiple XSS vuln. Vuln. discovered by : r0t Date: 7 August 2007 vendor:www.visionproject.se orginal advsiory: http://pridels-team.blogspot.com/2007/08/visionproject-multiple-xss-vuln.html affected versions:VisionProject 3.1 and previous VisionProject contains a flaw that allows a...