CVE-2021-44665

A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php...

CVE-2021-44665

A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php...

CVE-2021-44662

CVE-2021-44662 describes a reflected Site Scripting (XSS) vulnerability in the Xerte Project when using the link parameter in print.php, affecting Xerte up to version 3.8.4. The core issue is a client-side/XSS flaw exploited through a crafted link parameter, with network-based exposure and user i...

CVE-2021-44662

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

PT-2022-12195

Name of the Vulnerable Software and Affected Versions Xerte Project Xerte versions 3.8.4 and earlier Description A Site Scripting XSS issue exists via the link parameter in print.php. Recommendations For versions 3.8.4 and earlier, consider disabling access to the print.php endpoint until a patch...

PT-2022-12196

Name of the Vulnerable Software and Affected Versions Xerte Project Xerte versions 3.8.4 and earlier Description A Remote Code Execution RCE issue exists via a crafted php file through elfinder in connetor.php. This allows for potential code execution. Recommendations For Xerte Project Xerte...

PT-2022-12198

Name of the Vulnerable Software and Affected Versions Xerte Project Xerte versions 3.10.3 and earlier Description A Directory Traversal issue exists when downloading a project file via "download.php". This allows for potential access to sensitive files outside the intended directory...

CVE-2021-44663: Undefined Security Weakness

A Remote Code Execution RCE vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in connetor.php...

CVE-2021-44665: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php...

CVE-2021-44662: Improper Neutralization of Input During Web Page Generation

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...