Projeqtor: >> Projeqtor >> 7.4.2 Security Vulnerabilities
projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/criticalResourceExport.php.
CVSS Score
5.4
EPSS Score
0.001
Published
2024-04-04
projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /view/print.php.
CVSS Score
8.8
EPSS Score
0.039
Published
2024-04-04
Cross Site Scripting (XSS) vulnerability in ProjeQtOr 11.0.2 allows a remote attacker to execute arbitrary code via a crafted script to thecheckvalidHtmlText function in the ack.php and security.php files.
CVSS Score
6.1
EPSS Score
0.001
Published
2024-02-20
A Cross Site Scripting (XSS) vulnerability exists in Projeqtor 9.3.1 via /projeqtor/tool/saveAttachment.php, which allows an attacker to upload a SVG file containing malicious JavaScript code.
CVSS Score
9.9
EPSS Score
0.006
Published
2022-02-11