CVE-2021-41917

webTareas version 2.4 and earlier allows an authenticated user to store arbitrary web script or HTML by creating or editing a client name in the clients section, due to incorrect sanitization of user-supplied data and achieve a Stored Cross-Site Scripting attack against the platform users and...

CVE-2021-41917

webTareas version 2.4 and earlier allows an authenticated user to store arbitrary web script or HTML by creating or editing a client name in the clients section, due to incorrect sanitization of user-supplied data and achieve a Stored Cross-Site Scripting attack against the platform users and...

PT-2021-23450

Name of the Vulnerable Software and Affected Versions webTareas versions 2.4 and earlier Description The issue allows an authenticated user to store arbitrary web script or HTML by creating or editing a client name in the clients section, due to incorrect sanitization of user-supplied data. This...

PT-2020-16177

Name of the Vulnerable Software and Affected Versions webTareas versions prior to 2.2 Description The issue allows for XSS attacks in various PHP files, including clients/editclient.php, extensions/addextension.php, administration/add announcement.php, administration/departments.php,...

CVE-2020-25735: Improper Neutralization of Input During Web Page Generation

webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/addannouncement.php, administration/departments.php, administration/locations.php, expenses/claimtype.php, projects/editproject.php, and general/newnotifications.php...

CVE-2017-6090: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/...

CVE-2017-6090

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/...

PT-2017-16889

Name of the Vulnerable Software and Affected Versions PhpCollab versions 2.5.1 and earlier Description The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to the clients/editclient.php script, and then accessing it via a direct...