CVE-2015-2564

Description

References

• osvdb.org/show/osvdb/119169
• packetstormsecurity.com/files/130691/ProjectSend-r561-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2015/Mar/30 · Exploit
• exploit-db.com/exploits/36303 · Exploit
• itas.vn/news/itas-team-found-out-a-SQL-Injection-vulnerability-in-projectsend-r561-76.html · Exploit
• securityfocus.com/archive/1/534832/100/0/threaded

Altre vulnerabilità di projectsend

• CVE-2023-53980CRITICO 9.8ProjectSend r1605 contains a remote code execution vulnerability that allows attackers to upload malicious files by manipulating file extens…
• CVE-2023-53930ALTO 7.5ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download private files…
• CVE-2023-53906MEDIO 4.8projectSend r1605 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScri…
• CVE-2023-53905ALTO 8.0ProjectSend r1605 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into user profile name…
• CVE-2024-11680CRITICO 9.8EXPLOITED (CISA KEV)ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit …