Browse CVEs

HIGH 8.8 CVE-2024-29387 projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /view/print.php. Projeqtor after 11.2.0 Fix from $1,9502024-04-04 MEDIUM 5.4 CVE-2024-29386 projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/criticalResourceExport.php. Projeqtor after 11.2.0 Fix from $1,6002024-04-04 MEDIUM 6.1 CVE-2023-49034 Cross Site Scripting (XSS) vulnerability in ProjeQtOr 11.0.2 allows a remote attacker to execute arbitrary code via a crafted script to thecheckvalid… Projeqtor after 11.0.2 Fix from $1,6002024-02-20 CRITICAL 9.9 CVE-2021-42940 A Cross Site Scripting (XSS) vulnerability exists in Projeqtor 9.3.1 via /projeqtor/tool/saveAttachment.php, which allows an attacker to upload a SVG… Projeqtor after 9.3.1 Fix from $2,3002022-02-11 HIGH 8.8 CVE-2018-18924EPSS 9% The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with "#exec cmd" because rej… Projeqtor after 7.2.5 Fix from $1,9502018-11-04 HIGH 8.8 CVE-2017-11760 uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed of concat… Projeqtor after 6.3.1 Fix from $1,9502017-07-31 HIGH 7.5 CVE-2013-6164 SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrary SQL commands via the object… Projeqtor No fix yet Fix from $1,9502013-11-14