450 matches found
CVE-2018-7202
CVE-2018-7202 affects ProjectSend prior to r1053, where an XSS flaw exists in the Name field on the My Account page. Root cause: insufficient input validation/escaping in that field, enabling injection of client-side scripts. Impact is cross-site scripting affecting users handling their My Accoun...
CVE-2018-7202
An issue was discovered in ProjectSend before r1053. XSS exists in the "Name" field on the My Account page...
PT-2019-11091
Name of the Vulnerable Software and Affected Versions: ProjectSend versions prior to r1053 Description: A CSV Injection issue was discovered, affecting users who import data into Microsoft Excel. Recommendations: For versions prior to r1053, update to version r1053 or later to resolve the issue...
PT-2019-11092
Name of the Vulnerable Software and Affected Versions: ProjectSend versions prior to r1053 Description: An issue exists where XSS is present in the Name field on the My Account page, allowing for potential exploitation. Recommendations: For versions prior to r1053, update to version r1053 or late...
CVE-2018-7202: Improper Neutralization of Input During Web Page Generation
An issue was discovered in ProjectSend before r1053. XSS exists in the "Name" field on the My Account page...
ProjectSend CVS Injection Vulnerability
rojectSend formerly known as cFTP is a suite of self-hosted applications based on PHP and MySQL. A CVS injection vulnerability exists in versions prior to ProjectSend r1053 that affects victims who import data into Microsoft Excel...
CVE-2018-7201: Improper Neutralization of Formula Elements in a CSV File
CSV Injection was discovered in ProjectSend before r1053, affecting victims who import the data into Microsoft Excel...
Cross site scripting
Cross-site scripting XSS vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML...
CVE-2019-11533
Cross-site scripting XSS vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML...
CVE-2019-11492
ProjectSend before r1070 writes user passwords to the server logs...
Code injection
ProjectSend before r1070 writes user passwords to the server logs...
CVE-2019-11533
Cross-site scripting XSS vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML...
CVE-2019-11492
ProjectSend before r1070 writes user passwords to the server logs...
CVE-2019-11533
CVE-2019-11533 affects ProjectSend prior to r1070, with a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary script/HTML. The issue stems from insufficient input sanitization in the affected component, enabling client-side script execution in the contex...
CVE-2019-11533
Cross-site scripting XSS vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML...
CVE-2019-11492
ProjectSend before r1070 writes user passwords to the server logs...
CVE-2019-11492
CVE-2019-11492 affects ProjectSend before release r1070, where user passwords are written to server logs. This creates exposure of credentials via log data. According to NVD, the CVSS metrics indicate a network-accessible issue with low attack complexity and a medium (CVSS2) to high (CVSS3) base ...
PT-2019-12358
Name of the Vulnerable Software and Affected Versions ProjectSend versions prior to r1070 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to r1070, update to version r1070 or later to resolve the issue...
CVE-2019-11492: Insertion of Sensitive Information into Log File
ProjectSend before r1070 writes user passwords to the server logs...
PT-2019-12333
Name of the Vulnerable Software and Affected Versions ProjectSend versions prior to r1070 Description The issue allows user passwords to be written to the server logs. Recommendations For versions prior to r1070, update to version r1070 or later to resolve the issue...