CVE-2016-10734

Description

References

• sandboxescape/ProjectSend-multiple-vulnerabilities · Third Party Advisory

projectsend 的其他漏洞

• CVE-2023-53980严重 9.8ProjectSend r1605 contains a remote code execution vulnerability that allows attackers to upload malicious files by manipulating file extens…
• CVE-2023-53930高危 7.5ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download private files…
• CVE-2023-53906中危 4.8projectSend r1605 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScri…
• CVE-2023-53905高危 8.0ProjectSend r1605 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into user profile name…
• CVE-2024-11680严重 9.8EXPLOITED (CISA KEV)ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit …