Default credentials

TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...

CVE-2017-14838: Unrestricted Upload of File with Dangerous Type

TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange...

CVE-2017-14838

TeamWork Job Links is vulnerable to an arbitrary file upload in the profileChange and coverChange modules. The root cause is an improper validation/handling of uploaded files, allowing a remote attacker to upload arbitrary files. Impact noted in sources includes the ability to upload files remote...

PT-2017-13714

Name of the Vulnerable Software and Affected Versions TeamWork Job Links affected versions not specified Description The issue allows for Arbitrary File Upload through the profileChange and coverChange functions. Recommendations At the moment, there is no information about a newer version that...