İçeriğe atla
Noroxi

projectsend kayıtları

projectsend üreticisine ait 29 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %3,4
Silahlaştırılmış
2 · %6,9
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
7 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

29 kayıt
  • CVE-2024-11680
    97Hemen

    ProjectSend Unauthenticated Configuration Modification

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %92

    projectsend · projectsend26 Kas 2024

  • CVE-2014-9567
    43Planlayın

    Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to exe

    YüksekCVSS 7,5SilahlaştırılmışEPSS %43

    projectsend · projectsend7 Oca 2015

  • CVE-2021-40887
    40Planlayın

    Projectsend version r1295 is affected by a directory traversal vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %2

    projectsend · projectsend11 Eki 2021

  • CVE-2016-10733
    40Planlayın

    ProjectSend (formerly cFTP) r582 allows directory traversal via file=../ in the process-zip-download.php query string.

    KritikCVSS 9,8İstismar yokEPSS %2

    projectsend · projectsend29 Eki 2018

  • CVE-2016-10732
    40Planlayın

    ProjectSend (formerly cFTP) r582 allows authentication bypass via a direct request for users.php, home.php, edit-file.php?file_id=1, or proc

    KritikCVSS 9,8İstismar yokEPSS %2

    projectsend · projectsend29 Eki 2018

  • CVE-2017-9741
    39İzleyin

    install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to rep

    KritikCVSS 9,8İstismar yokEPSS %2

    projectsend · projectsend18 Haz 2017

  • CVE-2016-10734
    39İzleyin

    ProjectSend (formerly cFTP) r582 allows Insecure Direct Object Reference via includes/actions.log.export.php.

    KritikCVSS 9,8İstismar yokEPSS %2

    projectsend · projectsend29 Eki 2018

  • CVE-2016-10731
    39İzleyin

    ProjectSend (formerly cFTP) r582 allows SQL injection via manage-files.php with the request parameter status, manage-files.php with the requ

    KritikCVSS 9,8İstismar yokEPSS %1

    projectsend · projectsend29 Eki 2018

  • CVE-2019-11378
    36İzleyin

    An issue was discovered in ProjectSend r1053.

    YüksekCVSS 8,8İstismar yokEPSS %4

    projectsend · projectsend20 Nis 2019

  • CVE-2018-7201
    35İzleyin

    CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel.

    YüksekCVSS 8,8İstismar yokEPSS %1

    projectsend · projectsend22 May 2019

  • CVE-2023-53980
    34İzleyin

    ProjectSend r1605 Remote Code Execution via File Extension Manipulation

    YüksekCVSS 8,7İstismar yokEPSS %1

    projectsend · projectsend22 Ara 2025

  • CVE-2021-40884
    32İzleyin

    Projectsend version r1295 is affected by sensitive information disclosure.

    YüksekCVSS 8,1İstismar yokEPSS %1

    projectsend · projectsend11 Eki 2021

  • CVE-2020-28874
    31İzleyin

    reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic.

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    projectsend · projectsend26 Oca 2021

  • CVE-2019-11492
    30İzleyin

    ProjectSend before r1070 writes user passwords to the server logs.

    YüksekCVSS 7,5İstismar yokEPSS %1

    projectsend · projectsend26 Nis 2019

  • CVE-2023-53930
    28İzleyin

    ProjectSend r1605 Insecure Direct Object Reference File Download Vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    projectsend · projectsend17 Ara 2025

  • CVE-2015-2564
    27İzleyin

    SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to execute arbitrary SQ

    OrtaCVSS 6,5Kavram kanıtıEPSS %3

    projectsend · projectsend20 Mar 2015

  • CVE-2024-7658
    27İzleyin

    projectsend process.php get_preview resource injection

    OrtaCVSS 6,9İstismar yokEPSS %1

    projectsend · projectsend12 Ağu 2024

  • CVE-2021-40886
    26İzleyin

    Projectsend version r1295 is affected by a directory traversal vulnerability.

    OrtaCVSS 6,5İstismar yokEPSS %1

    projectsend · projectsend11 Eki 2021

  • CVE-2024-7659
    25İzleyin

    projectsend Password Reset Token functions.php generate_random_string random values

    OrtaCVSS 6,3İstismar yokEPSS %1

    projectsend · projectsend12 Ağu 2024

  • CVE-2019-11533
    24İzleyin

    Cross-site scripting (XSS) vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML.

    OrtaCVSS 6,1İstismar yokEPSS %1

    projectsend · projectsend26 Nis 2019

  • CVE-2017-9783
    24İzleyin

    Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote

    OrtaCVSS 6,1İstismar yokEPSS %1

    projectsend · projectsend6 Mar 2018

  • CVE-2017-9786
    24İzleyin

    Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote

    OrtaCVSS 6,1İstismar yokEPSS %1

    projectsend · projectsend6 Mar 2018

  • CVE-2018-7202
    24İzleyin

    An issue was discovered in ProjectSend before r1053.

    OrtaCVSS 6,1İstismar yokEPSS %1

    projectsend · projectsend22 May 2019

  • CVE-2023-53905
    24İzleyin

    ProjectSend r1605 CSV Injection via User Account Export Functionality

    OrtaCVSS 6,2İstismar yokEPSS %1

    projectsend · projectsend17 Ara 2025

  • CVE-2017-20101
    22İzleyin

    ProjectSend information disclosure

    OrtaCVSS 5,7İstismar yokEPSS %1

    projectsend · projectsend27 Haz 2022