269 matches found
CVE-2020-25735
webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/addannouncement.php, administration/departments.php, administration/locations.php, expenses/claimtype.php, projects/editproject.php, and general/newnotifications.php...
CVE-2020-25734
The CVE-2020-25734 entries in connected records indicate that webTareas up to version 2.1 exposes a directory listing vulnerability on the Default/ path via the web interface. The core detail consistently cited is that this enables listing of files under Default/, implying a potential information...
CVE-2020-25734
webTareas through 2.1 allows files/Default/ Directory Listing...
CVE-2020-25733
The connected sources confirm a vulnerability in webTareas version 2.1 where the application allows uploading of executables (.exe) and server-side script files (.shtml). This indicates insufficient validation of uploaded file types, potentially enabling attackers to place executable or script co...
CVE-2020-25733
webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types...
CVE-2020-23660
webTareas v2.1 is affected by Cross Site Scripting XSS on "Search."...
CVE-2020-23660
webTareas v2.1 is affected by Cross Site Scripting XSS on "Search."...
Cross site scripting
webTareas v2.1 is affected by Cross Site Scripting XSS on "Search."...
CVE-2020-23660
webTareas v2.1 is affected by Cross Site Scripting XSS on "Search."...
CVE-2020-23660
The candidate CVE CVE-2020-23660 affects webTareas v2.1 and is described as Cross Site Scripting (XSS) on the Search functionality. Connected sources (NVD, Red Hat, Red Hat PRION mirrors, CVE lists) consistently describe webTareas v2.1 XSS but do not provide additional technical details such as r...
Webtareas 2.1p - Arbitrary File Upload (Authenticated) Vulnerability
Exploit for php platform in category web applications Exploit Title: Webtareas 2.1p - Arbitrary File Upload Authenticated Author: AppleBois Exploit author : AppleBois Vendor Hompage:https://sourceforge.net/projects/webtareas/ Version: 2.1 && 2.1p Tested on: Window 10 64 bit environment || XAMPP...
Webtareas 2.1p - Arbitrary File Upload (Authenticated)
Exploit Title: Webtareas 2.1p - Arbitrary File Upload Authenticated Author: AppleBois Date: 2020-07-10 Exploit author : AppleBois Vendor Hompage:https://sourceforge.net/projects/webtareas/ Version: 2.1 && 2.1p Tested on: Window 10 64 bit environment || XAMPP Authenticated User allowed to upload...
Webtareas 2.1 / 2.1p Cross Site Scripting
Author: AppleBois Homepage: https://sourceforge.net/projects/webtareas/ Affected Version: 2.1/2.1p Stored XSS Allows an attacker to execute arbitrary HTML and JavaScript code More info : https://medium.com/@tehwinsam/webtareas-2-1-c8b406c68c2a Solutions: "NONE" Payload = alert‘AppleBois’;...
Webtareas 2.1 / 2.1p File Upload / Information Disclosure Vulnerabilities
Exploit for php platform in category web applications Authenticated File Upload vulnerability Author: AppleBois Homepage: https://sourceforge.net/projects/webtareas/ Affected Version: 2.1 && 2.1p Vendors Claim there's a patch on 2.1p but it's vulnerable and been few weeks without response. ".exe"...
webTareas Cross-Site Scripting Vulnerability
webTareas is a web-based open source collaboration tool. The product supports features such as project management, bug tracking, content management and meeting management. A cross-site scripting vulnerability exists in the loginForm in the general/login.php page in webTareas version 2.0p8. The...
CVE-2020-14973
The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting XSS vulnerability via the query string...
CVE-2020-14973
The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting XSS vulnerability via the query string...
Cross site scripting
The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting XSS vulnerability via the query string...
CVE-2020-14973
The CVE-2020-14973 entry affects webTareas 2.0p8, specifically the loginForm in general/login.php. It is a reflected Cross-Site Scripting (XSS) vulnerability via the query string. The impact is limited to client-side code execution in a comparison to the vulnerable context; exploitation details a...