Show filters
36 Total Results
Displaying 21-30 of 36
Sort by:
Attacker Value
Unknown
CVE-2016-10734
Disclosure Date: October 29, 2018 (last updated November 27, 2024)
ProjectSend (formerly cFTP) r582 allows Insecure Direct Object Reference via includes/actions.log.export.php.
0
Attacker Value
Unknown
CVE-2016-10733
Disclosure Date: October 29, 2018 (last updated November 27, 2024)
ProjectSend (formerly cFTP) r582 allows directory traversal via file=../ in the process-zip-download.php query string.
0
Attacker Value
Unknown
CVE-2016-10732
Disclosure Date: October 29, 2018 (last updated November 27, 2024)
ProjectSend (formerly cFTP) r582 allows authentication bypass via a direct request for users.php, home.php, edit-file.php?file_id=1, or process-zip-download.php, or add_user_form_* parameters to users-add.php.
0
Attacker Value
Unknown
CVE-2017-9786
Disclosure Date: March 06, 2018 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php.
0
Attacker Value
Unknown
CVE-2017-9783
Disclosure Date: March 06, 2018 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated.
0
Attacker Value
Unknown
CVE-2017-9741
Disclosure Date: June 18, 2017 (last updated November 26, 2024)
install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to replacing TABLES_PREFIX in the configuration file.
0
Attacker Value
Unknown
CVE-2016-8213
Disclosure Date: January 23, 2017 (last updated November 25, 2024)
EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P30 and Version 1.10, prior to P17; and EMC Documentum Administrator Version 7.0, Version 7.1, and Version 7.2 prior to P18 contain a Stored Cross-Site Scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system.
0
Attacker Value
Unknown
CVE-2016-0914
Disclosure Date: June 23, 2016 (last updated November 25, 2024)
EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface.
0
Attacker Value
Unknown
CVE-2015-2564
Disclosure Date: March 20, 2015 (last updated October 05, 2023)
SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to users-edit.php.
0
Attacker Value
Unknown
CVE-2014-9580
Disclosure Date: January 08, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote attackers to inject arbitrary web script or HTML via the Description field in a file upload. NOTE: this issue was originally incorrectly mapped to CVE-2014-1155; see CVE-2014-1155 for more information.
0
