CVE-2015-2564

概要

参考情報

• osvdb.org/show/osvdb/119169
• packetstormsecurity.com/files/130691/ProjectSend-r561-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2015/Mar/30 · Exploit
• exploit-db.com/exploits/36303 · Exploit
• itas.vn/news/itas-team-found-out-a-SQL-Injection-vulnerability-in-projectsend-r561-76.html · Exploit
• securityfocus.com/archive/1/534832/100/0/threaded

projectsend のその他の脆弱性

• CVE-2023-53980緊急 9.8ProjectSend r1605 contains a remote code execution vulnerability that allows attackers to upload malicious files by manipulating file extens…
• CVE-2023-53930高 7.5ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download private files…
• CVE-2023-53906中 4.8projectSend r1605 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScri…
• CVE-2023-53905高 8.0ProjectSend r1605 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into user profile name…
• CVE-2024-11680緊急 9.8悪用確認済み（CISA KEV）ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit …