ProjeQtor kayıtları
projeqtor üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-459 Incomplete Cleanup1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-42940İstismar yok | A Cross Site Scripting (XSS) vulnerability exists in Projeqtor 9.3.1 via /projeqtor/tool/saveAttachment.php, which allows an attacker to uplprojeqtor · projeqtor · CWE-79 | Kritik9,9 | — | %1,0 | 11 Şub 2022 |
38İzleyin | CVE-2018-18924Kavram kanıtı | The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with "#exec cmd" beprojeqtor · projeqtor · CWE-459 | Yüksek8,8 | — | %9,4 | 4 Kas 2018 |
35İzleyin | CVE-2017-11760İstismar yok | uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed projeqtor · projeqtor · CWE-94 | Yüksek8,8 | — | %1,2 | 31 Tem 2017 |
35İzleyin | CVE-2024-29387İstismar yok | projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /view/print.php.projeqtor · projeqtor · CWE-434 | Yüksek8,8 | — | %1,2 | 4 Nis 2024 |
31İzleyin | CVE-2013-6164Kavram kanıtı | SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrary SQL commands via tprojeqtor · projeqtor · CWE-89 | Yüksek7,5 | — | %3,4 | 14 Kas 2013 |
24İzleyin | CVE-2023-49034İstismar yok | Cross Site Scripting (XSS) vulnerability in ProjeQtOr 11.0.2 allows a remote attacker to execute arbitrary code via a crafted script to thecprojeqtor · projeqtor · CWE-79 | Orta6,1 | — | %0,5 | 20 Şub 2024 |
21İzleyin | CVE-2024-29386İstismar yok | projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/criticalResourceExport.php.projeqtor · projeqtor · CWE-89 | Orta5,4 | — | %0,3 | 4 Nis 2024 |
18İzleyin | CVE-2013-6163İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in ProjeQtOr (formerly Project'Or RIA) before 4.0.0 allow remote attackers to inject arbprojeqtor · projeqtor · CWE-79 | Orta4,3 | — | %1,7 | 14 Kas 2013 |
- CVE-2021-4294039İzleyin
A Cross Site Scripting (XSS) vulnerability exists in Projeqtor 9.3.1 via /projeqtor/tool/saveAttachment.php, which allows an attacker to upl
KritikCVSS 9,9İstismar yokEPSS %1projeqtor · projeqtor11 Şub 2022
- CVE-2018-1892438İzleyin
The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with "#exec cmd" be
YüksekCVSS 8,8Kavram kanıtıEPSS %9projeqtor · projeqtor4 Kas 2018
- CVE-2017-1176035İzleyin
uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed
YüksekCVSS 8,8İstismar yokEPSS %1projeqtor · projeqtor31 Tem 2017
- CVE-2024-2938735İzleyin
projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /view/print.php.
YüksekCVSS 8,8İstismar yokEPSS %1projeqtor · projeqtor4 Nis 2024
- CVE-2013-616431İzleyin
SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrary SQL commands via t
YüksekCVSS 7,5Kavram kanıtıEPSS %3projeqtor · projeqtor14 Kas 2013
- CVE-2023-4903424İzleyin
Cross Site Scripting (XSS) vulnerability in ProjeQtOr 11.0.2 allows a remote attacker to execute arbitrary code via a crafted script to thec
OrtaCVSS 6,1İstismar yokEPSS %0projeqtor · projeqtor20 Şub 2024
- CVE-2024-2938621İzleyin
projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/criticalResourceExport.php.
OrtaCVSS 5,4İstismar yokEPSS %0projeqtor · projeqtor4 Nis 2024
- CVE-2013-616318İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in ProjeQtOr (formerly Project'Or RIA) before 4.0.0 allow remote attackers to inject arb
OrtaCVSS 4,3İstismar yokEPSS %1projeqtor · projeqtor14 Kas 2013