Show filters
25 Total Results
Displaying 21-25 of 25
Sort by:
Attacker Value
Unknown
CVE-2017-9783
Disclosure Date: March 06, 2018 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in a Site name updated.
0
Attacker Value
Unknown
CVE-2017-9741
Disclosure Date: June 18, 2017 (last updated November 26, 2024)
install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to replacing TABLES_PREFIX in the configuration file.
0
Attacker Value
Unknown
CVE-2015-2564
Disclosure Date: March 20, 2015 (last updated October 05, 2023)
SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to users-edit.php.
0
Attacker Value
Unknown
CVE-2014-9580
Disclosure Date: January 08, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote attackers to inject arbitrary web script or HTML via the Description field in a file upload. NOTE: this issue was originally incorrectly mapped to CVE-2014-1155; see CVE-2014-1155 for more information.
0
Attacker Value
Unknown
CVE-2014-9567
Disclosure Date: January 07, 2015 (last updated October 05, 2023)
Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the upload/files/ or upload/temp/ directory.
0
