CVE-2008-5584 | BDVDB-2026-33883 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) a message, (2) a milestone, or (3) a display name in a profile, or the (4) a or (5) c parameter to index.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.projectpier.org/node/679
http://www.securityfocus.com/bid/27857
http://secunia.com/advisories/29016
http://www.securityfocus.com/archive/1/488294/100/200/threaded
http://securityreason.com/securityalert/4734

Exploit#

No public exploit known

History#

Version 12008-12-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.