Multiple Cross-Site Scripting Vulnerabilities in ProjeQtOr by Gaspard Potier
CVE-2013-6163

Currently unrated

Key Information:

Vendor

Projeqtor

Status
Projeqtor
Vendor
CVE Published:
14 November 2013

What is CVE-2013-6163?

ProjeQtOr, formerly known as Project'Or RIA, is susceptible to multiple cross-site scripting vulnerabilities that can be exploited by remote attackers. By manipulating parameters such as 'type' in view/parameter.php, 'p1value' in view/main.php, and 'objectClass' in view/objectDetail.php, attackers can inject arbitrary web scripts or HTML content. This security weakness can lead to unauthorized actions being executed in the context of current users, thereby compromising data integrity and confidentiality.

References

http://osvdb.org/99368
vdb-entryx_refsource_OSVDB
http://projectorria.org/index.php/menu_download_en/menu_h...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/63539
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.