Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2020-23069

Disclosure Date: August 18, 2021 (last updated February 23, 2025)
Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a malicious user read arbitrary files.
Attacker Value
Unknown

CVE-2020-14973

Disclosure Date: June 22, 2020 (last updated February 21, 2025)
The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting (XSS) vulnerability via the query string.