Unrated severityNVD Advisory· Published Jun 27, 2006· Updated Apr 16, 2026
CVE-2006-3240
CVE-2006-3240
Description
Cross-site scripting (XSS) vulnerability in classes/ui.class.php in dotProject 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- dotproject.cvs.sourceforge.net/dotproject/dotproject/classes/ui.class.phpnvdPatchVendor Advisory
- sourceforge.net/project/shownotes.phpnvdPatchThird Party Advisory
- jvn.jp/jp/JVN%2339188922/index.htmlnvdThird Party Advisory
- www.securityfocus.com/bid/18650nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/27585nvdBroken LinkThird Party AdvisoryVDB Entry
- secunia.com/advisories/20822nvdBroken LinkNot Applicable
- www.vupen.com/english/advisories/2006/2509nvdPermissions Required
News mentions
0No linked articles in our index yet.