Lucene search
+L

270 matches found

Positive Technologies
Positive Technologies
added 2022/12/02 12:00 a.m.15 views

PT-2022-27356 · Webtareas · Webtareas

Name of the Vulnerable Software and Affected Versions: webtareas version 2.4p5 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field in the /projects/listprojects.php component. This enables the execution of malicious...

5.4CVSS6AI score0.00413EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2022/12/02 12:00 a.m.8 views

PT-2022-27358 · Webtareas · Webtareas

Name of the Vulnerable Software and Affected Versions: webtareas version 2.4p5 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field in the /meetings/listmeetings.php component. This enables attackers to perform...

5.4CVSS5.5AI score0.00413EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2022/12/02 12:00 a.m.43 views

CVE-2022-44960

webtareas 2.4p5 was discovered to contain a cross-site scripting XSS vulnerability in the component /general/search.php?searchtype=simple. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search field...

5.5AI score0.00403EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/12/02 12:00 a.m.39 views

CVE-2022-44955

webtareas 2.4p5 was discovered to contain a cross-site scripting XSS vulnerability in the Chat function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Messages field...

5.5AI score0.00403EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/12/02 12:00 a.m.13 views

webTareas 跨站脚本漏洞

webTareas is a web-based open source collaboration tool. The product supports features such as project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.4p5, which stems from a cross-site scripting XSS vulnerability found i...

5.4CVSS5.7AI score0.01046EPSS
SaveExploits1References3
CVE
CVE
added 2022/12/02 12:00 a.m.81 views

CVE-2022-44290

WebTareas 2.4p5 contains a SQL injection in deleteapprovalstages.php via the id parameter. Nuclei details describe an authenticated time-based blind SQL injection that can extract sensitive data (tasks, user credentials, projects). CVSS v3.1 base score 9.8 (CRITICAL). Remediation guidance: upgrad...

9.8CVSS9.8AI score0.03616EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/12/02 12:00 a.m.81 views

CVE-2022-44957

WebTareas 2.4p5 contains a Cross-Site Scripting (XSS) vulnerability in the /clients/listclients.php component. The issue allows an attacker to inject arbitrary script or HTML via the Name field, potentially affecting authenticated WebTareas users and enabling script execution. Root cause: insuffi...

5.4CVSS5.3AI score0.01046EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/12/02 12:00 a.m.11 views

webTareas 跨站脚本漏洞

webTareas is a web-based open source collaboration tool. The product supports features such as project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.4p5, which stems from a cross-site scripting XSS vulnerability found i...

5.4CVSS5.6AI score0.00413EPSS
SaveExploits1References3
CVE
CVE
added 2022/12/02 12:00 a.m.60 views

CVE-2022-44961

CVE-2022-44961 affects webtareas 2.4p5. A cross-site scripting (XSS) vulnerability exists in the component /forums/editforum.php, allowing an attacker to inject crafted payloads into the Name field to execute arbitrary web scripts/HTML in a victim’s browser. Connected sources confirm the affected...

5.4CVSS5.3AI score0.00403EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/12/02 12:00 a.m.11 views

webTareas 跨站脚本漏洞

webTareas is a web-based open source collaboration tool. The product supports features such as project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.4p5, which stems from a cross-site scripting XSS vulnerability found i...

5.4CVSS5.7AI score0.00413EPSS
SaveExploits1References3
CVE
CVE
added 2022/12/02 12:00 a.m.69 views

CVE-2022-44955

CVE-2022-44955 affects webtareas version 2.4p5, where a cross-site scripting (XSS) vulnerability exists in the Chat function. The vulnerability allows an attacker to inject a crafted payload into the Messages field to execute arbitrary web scripts or HTML. Documented impact is limited to the abil...

5.4CVSS5.3AI score0.00403EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/12/02 12:00 a.m.55 views

CVE-2022-44956

CVE-2022-44956 affects webtareas 2.4p5, with an XSS in /projects/listprojects.php. The Name field accepts crafted input enabling arbitrary web script/HTML execution. Root cause is input handling in that component; impact is client-side script execution. Mitigations referenced in connected documen...

5.4CVSS5.3AI score0.00413EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/12/02 12:00 a.m.57 views

CVE-2022-44953

CVE-2022-44953 affects webtareas 2.4p5, with a cross-site scripting (XSS) vulnerability in the /linkedcontent/listfiles.php component. The issue allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the Name field after clicking “Add.” The CVSS vector ind...

5.4CVSS5.3AI score0.00413EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/12/02 12:00 a.m.59 views

CVE-2022-44959

CVE-2022-44959 affects webtareas 2.4p5, with a cross-site scripting (XSS) vulnerability in the component /meetings/listmeetings.php. A crafted payload injected into the Name field can cause arbitrary web scripts/HTML to run in a user’s browser, enabling client-side code execution. Several connect...

5.4CVSS5.3AI score0.00413EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/02 12:00 a.m.15 views

PT-2022-27357 · Webtareas · Webtareas

Name of the Vulnerable Software and Affected Versions: webtareas version 2.4p5 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field in the /clients/listclients.php component. This enables attackers to perform cross-sit...

5.4CVSS5.4AI score0.01046EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2022/12/02 12:00 a.m.39 views

CVE-2022-44290

webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php...

10AI score0.03616EPSS
SaveExploits1References1
CVE
CVE
added 2022/12/02 12:00 a.m.59 views

CVE-2022-44962

CVE-2022-44962 corresponds to a cross-site scripting (XSS) vulnerability in webtareas version 2.4p5, located in the /calendar/viewcalendar.php component. The issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Subject field, which could affect u...

5.4CVSS5.3AI score0.00403EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/02 12:00 a.m.10 views

CVE-2022-44955

webtareas 2.4p5 was discovered to contain a cross-site scripting XSS vulnerability in the Chat function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Messages field...

5.3AI score0.00403EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/12/02 12:00 a.m.8 views

webTareas SQL注入漏洞

webTareas is a web-based open source collaboration tool. The product supports features such as project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.4p5, which originates from an SQL injection via the id parameter in...

9.8CVSS8.7AI score0.03616EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/12/02 12:00 a.m.11 views

webTareas 跨站脚本漏洞

webTareas is a web-based open source collaboration tool. The product supports features such as project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.4p5, which stems from the discovery of a cross-site scripting XSS...

5.4CVSS5.8AI score0.00403EPSS
SaveExploits1References3
Rows per page
Query Builder