Description
Multiple cross-site scripting (XSS) vulnerabilities in ProjeQtOr (formerly Project'Or RIA) before 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) type parameter to view/parameter.php, (2) p1value parameter to view/main.php, or (3) objectClass parameter to view/objectDetail.php.
References
- 99368 vdb-entry
- http://projectorria.org/index.php/menu_download_en/menu_history_en
- 63539 vdb-entry
- 55451 third-party-advisory
- 20131105 [ISecAuditors Security Advisories] Multiple XSS vulnerabilities in "Project'Or RIA" mailing-list
- 20131105 [ISecAuditors Security Advisories] Multiple XSS vulnerabilities in "Project'Or RIA" mailing-list
- projeqtor-cve20136163-xss(88583) vdb-entry
- 99369 vdb-entry
- 99366 vdb-entry
- http://packetstormsecurity.com/files/123916