Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
webtareas project webtareas 2.4 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-44290
webTareas 2.4p5 exists to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php.
Webtareas Project Webtareas 2.4
NA
CVE-2022-44291
webTareas 2.4p5 exists to contain a SQL injection vulnerability via the id parameter in phasesets.php.
Webtareas Project Webtareas 2.4
6.8
CVSSv2
CVE-2021-41916
A Cross-Site Request Forgery (CSRF) vulnerability in webTareas version 2.4 and previous versions allows a remote malicious user to create a new administrative profile and add a new user to the new profile. without the victim's knowledge, by enticing an authenticated admin us...
Webtareas Project Webtareas
5
CVSSv2
CVE-2021-41920
webTareas version 2.4 and previous versions allows an unauthenticated user to perform Time and Boolean-based blind SQL Injection on the endpoint /includes/library.php, via the sor_cible, sor_champs, and sor_ordre HTTP POST parameters. This allows an malicious user to access all t...
Webtareas Project Webtareas
3.5
CVSSv2
CVE-2021-41917
webTareas version 2.4 and previous versions allows an authenticated user to store arbitrary web script or HTML by creating or editing a client name in the clients section, due to incorrect sanitization of user-supplied data and achieve a Stored Cross-Site Scripting attack against...
Webtareas Project Webtareas
3.5
CVSSv2
CVE-2021-41918
webTareas version 2.4 and previous versions allows an authenticated user to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against the platform users and administrators. The issue affects...
Webtareas Project Webtareas
6.5
CVSSv2
CVE-2021-41919
webTareas version 2.4 and previous versions allows an authenticated user to arbitrarily upload potentially dangerous files without restrictions. This is working by adding or replacing a personal profile picture. The affected endpoint is /includes/upload.php on the HTTP POST data....
Webtareas Project Webtareas
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2