CVE-2021-44665

A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php...

Path traversal

An Authenticated Remote Code Exection RCE vulnerability exists in Xerte through 3.9 in websitecode/php/import/fileupload.php by uploading a maliciously crafted PHP file though the project interface disguised as a language file to bypasses the upload filters. Attackers can manipulate the files...

Directory traversal

A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php...

CVE-2021-44665

Summary (CVE-2021-44665): A directory traversal vulnerability exists in the Xerte Project Xerte up to version 3.10.3 when downloading a project file via download.php (as described in the CVE entry and corroborated by multiple sources). Public material shows an authenticated path traversal PoC usi...

CVE-2021-44665

A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php...

CVE-2021-44664

CVE-2021-44664 affects Xerte up to version 3.9, with an authenticated RCE described in multiple sources. The vulnerability resides in website_code/php/import/fileupload.php, where an attacker can upload a malicious PHP file disguised as a language file to bypass upload filters. The attacker can t...

CVE-2021-44664

An Authenticated Remote Code Exection RCE vulnerability exists in Xerte through 3.9 in websitecode/php/import/fileupload.php by uploading a maliciously crafted PHP file though the project interface disguised as a language file to bypasses the upload filters. Attackers can manipulate the files...

CVE-2021-44662

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

CVE-2021-44663

A Remote Code Execution RCE vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in connetor.php...

CVE-2021-44662

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

CVE-2021-44662

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

CVE-2021-44663

A Remote Code Execution RCE vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in connetor.php...

CVE-2021-44663

A Remote Code Execution RCE vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in connetor.php...

Remote code execution

A Remote Code Execution RCE vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in connetor.php...

Cross site scripting

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

CVE-2021-44663

A Remote Code Execution RCE vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in connetor.php...

CVE-2021-44663

The CVE-2021-44663 vulnerability affects Xerte Project (Xerte) up to version 3.8.4, where remote code execution can be triggered via a crafted PHP file uploaded through elfinder in connector.php. The underlying issue enables network-exposed RCE with high impact (as indicated by CVSS scores in the...

CVE-2021-44662

CVE-2021-44662 describes a reflected Site Scripting (XSS) vulnerability in the Xerte Project when using the link parameter in print.php, affecting Xerte up to version 3.8.4. The core issue is a client-side/XSS flaw exploited through a crafted link parameter, with network-based exposure and user i...

CVE-2021-44662

A Site Scripting XSS vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php...

Xerte 安全漏洞

Xerte is an open source software from The Xerte Project community in the UK. Used to create learning objects. a security vulnerability exists in Xerte, which stems from a Remote Code Execution RCE vulnerability present in The Xerte Project. No details of the vulnerability are currently available...