>> dotProject Unspecified Data Handling Client-Side Cross Site Scripting Vulnerability
Title : dotProject Unspecified Data Handling Client-Side Cross Site Scripting Vulnerability VUPEN ID : VUPEN/ADV-2007-2214 CVE ID : CVE-2007-3226
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-06-15
Technical Description
A vulnerability has been identified in dotProject, which could be exploited by attackers to execute arbitrary scripting code. This issue is caused by unspecified input validation errors when processing user-supplied data, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
