Multiple cross-site scripting (XSS) vulnerabilities in ProjeQtOr (formerly Project'Or RIA) before 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) type parameter to view/parameter.php, (2) p1value parameter to view/main.php, or (3) objectClass parameter to view/objectDetail.php.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2013-11-14T20:00:00

Updated: 2024-08-06T17:29:42.983Z

Reserved: 2013-10-16T00:00:00

Link: CVE-2013-6163

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-11-14T20:55:04.917

Modified: 2017-08-29T01:33:55.060

Link: CVE-2013-6163

cve-icon Redhat

No data.