CVE-2007-1576

Multiple cross-site scripting (XSS) vulnerabilities in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the (1) Projects, (2) Contacts, (3) Helpdesk, (4) Search (only Gecko engine driven Browsers), and (5) Notes modules; the (6) Mail summary page; and unspecified other files.

Link	Resource
http://www.nruns.de/security_advisory_phprojekt_xss_and_filter_evasion.php	Broken Link Vendor Advisory
http://www.phprojekt.com/index.php?name=News&file=article&sid=276	Broken Link Patch
http://www.securityfocus.com/bid/22957	VDB Entry
http://secunia.com/advisories/24509
http://security.gentoo.org/glsa/glsa-200706-07.xml	Third Party Advisory
http://secunia.com/advisories/25748
http://securityreason.com/securityalert/2459
http://osvdb.org/34064
http://osvdb.org/34066
http://osvdb.org/34068
http://osvdb.org/34069
http://osvdb.org/34067
http://osvdb.org/34065
http://www.securityfocus.com/archive/1/462788/100/0/threaded

Configuration 1

cpe:2.3:a:phprojekt:phprojekt:5.2:*:*:*:*:*:*:*

---

Published : 2007-03-21 09:19

Updated : 2018-10-16 04:39

---

NVD link : CVE-2007-1576

Mitre link : CVE-2007-1576

No products.

CWE-79