CVE

Id
81160  
CVE No.
CVE-2015-3883  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in qdPM 8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) search[keywords] parameter to index.php/users page; the (2) "Name of application" on index.php/configuration; (3) a new project name on index.php/projects; (4) the task name on index.php/tasks; (5) ticket name on index.php/tickets; (6) discussion name on index.php/discussions; (7) report name on index.php/projectReports; or (8) event name on index.php/scheduler/personal.  
Phase
Assigned (20150512)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
731193 81160 CVE-2015-3883 MISC:http://rossmarks.uk/portfolio.php  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7735 JVNDB-2015-003055 Dolibarr ERP/CRM におけるクロスサイトスクリプティングの脆弱性 Dolibarr ERP/CRM には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-3935 81160 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003055.html  View