47 matches found
DooTask SQL注入漏洞
DooTask is a task management tool for kuaifan individual developers. A SQL injection vulnerability exists in DooTask 1.2.49 and earlier versions, which stems from incorrect manipulation of the parameter keysdepartment in the file app/Http/Controllers/Api/UsersController.php, which could lead to a...
CVE-2025-55455
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext...
CVE-2025-55454
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-55455
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext...
CVE-2025-55454
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-55455
DooTask version 1.0.51 contains an authenticated arbitrary download vulnerability within the /msg/sendtext component. This flaw allows an authenticated user to perform unauthorized downloads, potentially leading to information disclosure. No information regarding a patched version or specific wor...
dootask 安全漏洞
dootask is an open source online project task management tool from dootask, Inc. A security vulnerability exists in dootask version 1.0.51, which stems from an authenticated arbitrary file upload issue in the /msg/sendfiles component that could lead to the execution of arbitrary code...
CVE-2025-55454
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file...
PT-2025-34488 · Dootask · Dootask
Name of the Vulnerable Software and Affected Versions: DooTask version 1.0.51 Description: An authenticated arbitrary file upload issue exists in the /msg/sendfiles component of DooTask version 1.0.51. This allows attackers to execute arbitrary code by uploading a crafted file. Recommendations: A...
CVE-2025-55455
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext...
CVE-2025-55454: Unrestricted Upload of File with Dangerous Type
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-55455
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext...
dootask 安全漏洞
dootask is an open source online project task management tool from dootask, Inc. A security vulnerability exists in dootask version 1.0.51, which stems from an authentication arbitrary download issue in the /msg/sendtext component...
PT-2025-34498 · Dootask · Dootask
Name of the Vulnerable Software and Affected Versions: DooTask version 1.0.51 Description: DooTask version 1.0.51 contains an authenticated arbitrary download vulnerability within the /msg/sendtext component. Recommendations: At the moment, there is no information about a newer version that...
CVE-2025-55454
DooTask version 1.0.51 is affected by an authenticated arbitrary file upload vulnerability in the /msg/sendfiles component. This flaw allows an authenticated attacker to upload a crafted file, leading to arbitrary code execution . Currently, no information regarding a newer version containing a f...
CVE-2025-55455
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext...
CVE-2025-55454
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2025-55455: Unrestricted Upload of File with Dangerous Type
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext...