CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-9786

Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the Description field in My account Name updated, related to home.php and actions-log.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 45.1%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2017-9786

Projectsend » Projectsend » Version: 100

cpe:2.3:a:projectsend:projectsend:100
Projectsend » Projectsend » Version: 102

cpe:2.3:a:projectsend:projectsend:102
Projectsend » Projectsend » Version: 105

cpe:2.3:a:projectsend:projectsend:105
Projectsend » Projectsend » Version: 1053

cpe:2.3:a:projectsend:projectsend:1053
Projectsend » Projectsend » Version: 1070

cpe:2.3:a:projectsend:projectsend:1070
Projectsend » Projectsend » Version: 110

cpe:2.3:a:projectsend:projectsend:110
Projectsend » Projectsend » Version: 155

cpe:2.3:a:projectsend:projectsend:155
Projectsend » Projectsend » Version: 156

cpe:2.3:a:projectsend:projectsend:156
Projectsend » Projectsend » Version: 157

cpe:2.3:a:projectsend:projectsend:157
Projectsend » Projectsend » Version: 161

cpe:2.3:a:projectsend:projectsend:161
Projectsend » Projectsend » Version: 180

cpe:2.3:a:projectsend:projectsend:180
Projectsend » Projectsend » Version: 335

cpe:2.3:a:projectsend:projectsend:335
Projectsend » Projectsend » Version: 375

cpe:2.3:a:projectsend:projectsend:375
Projectsend » Projectsend » Version: 405

cpe:2.3:a:projectsend:projectsend:405
Projectsend » Projectsend » Version: 412

cpe:2.3:a:projectsend:projectsend:412
Projectsend » Projectsend » Version: 514

cpe:2.3:a:projectsend:projectsend:514
Projectsend » Projectsend » Version: 559

cpe:2.3:a:projectsend:projectsend:559
Projectsend » Projectsend » Version: 561

cpe:2.3:a:projectsend:projectsend:561
Projectsend » Projectsend » Version: 582

cpe:2.3:a:projectsend:projectsend:582
Projectsend » Projectsend » Version: 753

cpe:2.3:a:projectsend:projectsend:753
Projectsend » Projectsend » Version: 754

cpe:2.3:a:projectsend:projectsend:754
Projectsend » Projectsend » Version: 756

cpe:2.3:a:projectsend:projectsend:756
Projectsend » Projectsend » Version: r375

cpe:2.3:a:projectsend:projectsend:r375
Projectsend » Projectsend » Version: r405

cpe:2.3:a:projectsend:projectsend:r405
Projectsend » Projectsend » Version: r412

cpe:2.3:a:projectsend:projectsend:r412
Projectsend » Projectsend » Version: r514

cpe:2.3:a:projectsend:projectsend:r514
Projectsend » Projectsend » Version: r559

cpe:2.3:a:projectsend:projectsend:r559
Projectsend » Projectsend » Version: r561

cpe:2.3:a:projectsend:projectsend:r561
Projectsend » Projectsend » Version: r571

cpe:2.3:a:projectsend:projectsend:r571
Projectsend » Projectsend » Version: r572

cpe:2.3:a:projectsend:projectsend:r572
Projectsend » Projectsend » Version: r582

cpe:2.3:a:projectsend:projectsend:r582
Projectsend » Projectsend » Version: r609

cpe:2.3:a:projectsend:projectsend:r609
Projectsend » Projectsend » Version: r753

cpe:2.3:a:projectsend:projectsend:r753
Projectsend » Projectsend » Version: r754

cpe:2.3:a:projectsend:projectsend:r754

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-9786

Products

Pricing

Contact Us