CVE-2005-4485

CVE-2005-4485 describes cross-site scripting (XSS) in ProjectApp 3.3 and earlier. The issue arises from unsanitized input in multiple parameters across several pages: keywords (forums.asp, search_employees.asp, cat.asp, links.asp), projectid (pmprojects.asp), ret_page (login.asp), and skin_number...