webTareas 跨站脚本漏洞

webTareas is a web-based open source collaboration tool. The product supports features such as project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.4p5, which stems from a cross-site scripting XSS vulnerability found i...

PT-2022-27360 · Webtareas · Webtareas

Name of the Vulnerable Software and Affected Versions: webtareas version 2.4p5 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field in the /forums/editforum.php component. This enables the execution of malicious code o...

CVE-2022-44954

CVE-2022-44954 affects webtareas version 2.4p5, with a cross-site scripting (XSS) vulnerability in the /contacts/listcontacts.php component. The issue arises when a crafted payload is injected into the Last Name field after clicking “Add,” allowing execution of arbitrary scripts. The available do...

CVE-2022-44960

CVE-2022-44960 affects webtareas v2.4p5, where an XSS flaw exists in the /general/search.php?searchtype=simple component. A crafted payload in the Search field can trigger arbitrary web scripts/HTML in the user’s browser. The evidence consistently points to a client-side script injection vulnerab...

CVE-2022-44290

webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php...

CVE-2021-36609

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php...

CVE-2021-36608

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php...

CVE-2021-36609

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php...

CVE-2021-36608

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php...

CVE-2021-36608

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php...

CVE-2021-36609

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php...

Cross site scripting

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php...

Cross site scripting

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php...

CVE-2021-36608

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php...

CVE-2021-36608

CVE-2021-36608 corresponds to a Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1. The issue is triggered via the Name field in /projects/editproject.php. The connected records confirm the affected product/version and the vulnerable parameter, but do not provide details about the underl...

CVE-2021-36609

CVE-2021-36609 describes a Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1, exploitable via the Name field in /linkedcontent/editfolder.php. The issue is triggered by user-supplied input passed to this parameter, enabling script execution in a victim’s browser. Affected product: webTa...

CVE-2021-36609

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php...

webTareas 跨站脚本漏洞

webTareas is a web-based open source collaboration tool. The product supports project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.2p1, which originated from a cross-site scripting vulnerability found in the Name field...

webTareas 跨站脚本漏洞

webTareas is a web-based open source collaboration tool. The product supports project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.2p1, which originated from a cross-site scripting vulnerability found in the Name field...

WebTareas 2.4 - Blind SQL injection (Authenticated) Vulnerability

Exploit Title: WebTareas 2.4 - Blind SQLi Authenticated Exploit Author: Behrad Taher Vendor Homepage: https://sourceforge.net/projects/webtareas/ Version: 2.4p3 CVE : CVE-2021-43481 The script takes 3 arguments: IP, user ID, session ID Example usage: python3 webtareassqli.py 127.0.0.1 1...