CVE-2019-11600

概要

参考情報

• packetstormsecurity.com/files/152806/OpenProject-8.3.1-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2019/May/7 · Exploit
• groups.google.com/forum
• seclists.org/bugtraq/2019/May/22 · Exploit
• openproject.org/release-notes/openproject-8-3-2 · Vendor Advisory

openproject のその他の脆弱性

• CVE-2026-40896高 7.1OpenProject is open-source, web-based project management software. Prior to version 17.3.0, a user with `manage_agendas` permission in any p…
• CVE-2026-33667高 7.4OpenProject is an open-source project management application. In versions prior to 17.3.0, 2FA OTP verification in the confirm_otp action of…
• CVE-2026-34717高 8.1OpenProject is an open-source, web-based project management software. Prior to version 17.2.3, the =n operator in modules/reporting/lib/repo…
• CVE-2026-32703中 5.4OpenProject is an open-source, web-based project management software. In versions prior to 16.6.9, 17.0.6, 17.1.3, and 17.2.1, the Repositor…
• CVE-2026-32698高 7.2OpenProject is an open-source, web-based project management software. Versions prior to 16.6.9, 17.0.6, 17.1.3, and 17.2.1 are vulnerable to…