Description
Cross-site scripting (XSS) vulnerability in dotProject before 2.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2006-2851 and CVE-2006-3240.
References
- 36381 vdb-entry
- ADV-2007-2214 vdb-entry
- JVN#63602912 third-party-advisory
- 24472 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=510005&group_id=21656
- 25638 third-party-advisory
- dotproject-unspecified-xss(34865) vdb-entry