Description
Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Priorities, (3) Severities, (4) Projects, (5) WO# Find, (6) Departments and (7) Users features.
References
- http://dcl.sourceforge.net/index.php
- 5182 vdb-entry
- dcl-html-injection(9532) vdb-entry
- 20020714 [VulnWatch] Double Choco Latte multiple vulnerabilities mailing-list
- 20020714 Double Choco Latte multiple vulnerabilities mailing-list