CVE-2007-1576

Description

Multiple cross-site scripting (XSS) vulnerabilities in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the (1) Projects, (2) Contacts, (3) Helpdesk, (4) Search (only Gecko engine driven Browsers), and (5) Notes modules; the (6) Mail summary page; and unspecified other files.

References

http://www.securityfocus.com/bid/22957

http://www.securityfocus.com/archive/1/462788/100/0/threaded

http://securityreason.com/securityalert/2459

http://security.gentoo.org/glsa/glsa-200706-07.xml

http://secunia.com/advisories/25748

http://secunia.com/advisories/24509

http://osvdb.org/34069

http://osvdb.org/34068

http://osvdb.org/34067

http://osvdb.org/34066

http://osvdb.org/34065

http://osvdb.org/34064

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3