426 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php...
CVE-2017-9786
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php...
CVE-2017-9783
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated...
CVE-2017-9786
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php...
CVE-2017-9783
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated...
CVE-2017-9783
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated...
CVE-2017-9786
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php...
CVE-2017-9783
CVE-2017-9783 affects ProjectSend (formerly cFTP), a PHP/MySQL-based self-hosted app. A Cross-site Scripting (XSS) vulnerability exists in the Description field during a Site name update, allowing remote attackers to inject arbitrary web script or HTML. The issue is tied to commits before 6c37104...
CVE-2017-9786
CVE-2017-9786 is a Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca. The flaw allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and ...
CVE-2017-9783
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated...
CVE-2017-9786
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php...
CVE-2017-9786: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php...
PT-2018-8533
Name of the Vulnerable Software and Affected Versions ProjectSend versions prior to commit 6c3710430be26feb5371cb0377e5355d6f9a27ca Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name update. This cou...
PT-2018-8534
Name of the Vulnerable Software and Affected Versions ProjectSend formerly cFTP versions before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Description field in "My account Name...
CVE-2017-9783: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ProjectSend formerly cFTP before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated...
ProjectSend 'install/make-config.php' file arbitrary code execution vulnerability
ProjectSend formerly known as cFTP is a suite of self-hosted applications based on PHP and MySQL. A security vulnerability exists in the 'install/make-config.php' file in ProjectSend r754. The vulnerability can be exploited by a remote attacker to execute arbitrary PHP code with the help of the...
Design/Logic Flaw
install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to replacing TABLESPREFIX in the configuration file...
CVE-2017-9741
install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to replacing TABLESPREFIX in the configuration file...