Webtareas Project

webtareas_project

27 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (27)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-41916 1Webtareas Project 1Webtareas Nov 21, 2024 Oct 8, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A Cross-Site Request Forgery (CSRF) vulnerability in webTareas version 2.4 and earlier allows a remote attacker to create a new administrative profile and add a new user to the new profile. without the victim's knowledge...Show more A Cross-Site Request Forgery (CSRF) vulnerability in webTareas version 2.4 and earlier allows a remote attacker to create a new administrative profile and add a new user to the new profile. without the victim's knowledge, by enticing an authenticated admin user to visit an attacker's web page.Show less
CVE-2020-23069 1Webtareas Project 1Webtareas Nov 21, 2024 Aug 18, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a malicious user read arbitrary files.
CVE-2020-25735 1Webtareas Project 1Webtareas Nov 21, 2024 Sep 18, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add_announcement.php, administration/departments.php, administration/locations.php, expenses/claim_type.php, project...Show more webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add_announcement.php, administration/departments.php, administration/locations.php, expenses/claim_type.php, projects/editproject.php, and general/newnotifications.php.Show less
CVE-2020-25734 1Webtareas Project 1Webtareas Nov 21, 2024 Sep 18, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 webTareas through 2.1 allows files/Default/ Directory Listing.
CVE-2020-25733 1Webtareas Project 1Webtareas Nov 21, 2024 Sep 18, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types.
CVE-2020-23660 1Webtareas Project 1Webtareas Nov 21, 2024 Aug 26, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 webTareas v2.1 is affected by Cross Site Scripting (XSS) on "Search."
CVE-2020-14973 1Webtareas Project 1Webtareas Nov 21, 2024 Jun 22, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting (XSS) vulnerability via the query string.