Description
Cross-site scripting (XSS) vulnerability in classes/ui.class.php in dotProject 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter.
References
- ADV-2006-2509 vdb-entry
- 20822 third-party-advisory
- dotproject-classesuiclass-xss(27585) vdb-entry
- http://dotproject.cvs.sourceforge.net/dotproject/dotproject/classes/ui.class.php?r1=1.113&r2=1.114
- http://sourceforge.net/project/shownotes.php?release_id=427236
- 18650 vdb-entry
- JVN#39188922 third-party-advisory