CVE:CVE-2006-3240
CNNVD:CNNVD-200606-518
dotProject 2.0.3及更早版本的classes/ui.class.php中的跨站脚本攻击(XSS)漏洞，可让远程攻击者通过login参数注入任意Web脚本或HTML。
solution:Upgrade dotproject dotproject to a higher version than 2.0.3,and avoid the version (,2.0.3]