CVE-2006-3240

Cross-site scripting (XSS) vulnerability in classes/ui.class.php in dotProject 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter.

• CWE-79

• http://dotproject.cvs.sourceforge.net/dotproject/dotproject/classes/ui.class.php?r1=1.113&r2=1.114Patch, Vendor Advisory
• http://jvn.jp/jp/JVN%2339188922/index.htmlThird Party Advisory
• http://secunia.com/advisories/20822Broken Link, Not Applicable
• http://sourceforge.net/project/shownotes.php?release_id=427236Patch, Third Party Advisory
• http://www.securityfocus.com/bid/18650Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/2509Permissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27585Broken Link, Third Party Advisory, VDB Entry
• http://dotproject.cvs.sourceforge.net/dotproject/dotproject/classes/ui.class.php?r1=1.113&r2=1.114Patch, Vendor Advisory
• http://jvn.jp/jp/JVN%2339188922/index.htmlThird Party Advisory
• http://secunia.com/advisories/20822Broken Link, Not Applicable
• http://sourceforge.net/project/shownotes.php?release_id=427236Patch, Third Party Advisory
• http://www.securityfocus.com/bid/18650Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/2509Permissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27585Broken Link, Third Party Advisory, VDB Entry

Published

Jun 27, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3234Multiple SQL injection vulnerabilities in index.php in FineS…
• CVE-2006-3235Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2006-3236Multiple SQL injection vulnerabilities in thinkWMS 1.0 and e…
• CVE-2006-3237Cross-site scripting (XSS) vulnerability in index.php in Ent…
• CVE-2006-3238Multiple SQL injection vulnerabilities in VBZooM 1.00 and ea…
• CVE-2006-3239SQL injection vulnerability in message.php in VBZooM 1.11 an…
• CVE-2006-3241Cross-site scripting (XSS) vulnerability in messages.php in …
• CVE-2006-3242Stack-based buffer overflow in the browse_get_namespace func…
• CVE-2006-3243SQL injection vulnerability in usercp.php in MyBB (MyBulleti…
• CVE-2006-3244Multiple SQL injection vulnerabilities in Anthill 0.2.6 and …
• CVE-2006-3245Multiple cross-site scripting (XSS) vulnerabilities in activ…
• CVE-2006-3246Cross-site scripting (XSS) vulnerability in show.php in GL-S…