Unscored CVE-2008-6666 EUVD-2008-6628GHSA-8cc9-5rm3-3m89

Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the d…

Published Apr 8, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to (1) servlet/com.threeis.webta.H710selProject and (2) servlet/com.threeis.webta.H720editProjectInfo. NOTE: BID:29610 states that the initial report was incorrect, but the reason for this conclusion is unknown.

References

30588 third-party-advisory
46207 vdb-entry
29610 vdb-entry
webta-comthreeiswebta-xss(43056) vdb-entry
46208 vdb-entry
20080609 webTA by kronos - XSS mailing-list