Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
qdPM Multiple Cross-site Scripting (XSS) Vulnerabilities - CVE-2015-3883 - Vulnerability Database
qdPM

qdPM Multiple Cross-site Scripting (XSS) Vulnerabilities - CVE-2015-3883

Medium
Reference: CVE-2015-3883
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-3883
Title: qdPM Multiple Cross-site Scripting (XSS) Vulnerabilities
Overview:

Multiple cross-site scripting (XSS) vulnerabilities in qdPM 8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) searchkeywords parameter to index.php/users page the (2) quotName of applicationquot on index.php/configuration (3) a new project name on index.php/projects (4) the task name on index.php/tasks (5) ticket name on index.php/tickets (6) discussion name on index.php/discussions (7) report name on index.php/projectReports or (8) event name on index.php/scheduler/personal.