Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 28

Export CSV
CVE-2021-36609

Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Webtareas Project
Products
Webtareas
CVE-2021-36608

Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Webtareas Project
Products
Webtareas
CVE-2020-25735

webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add_announcement.php, administration/departments.php, administration/locations.php, expenses/claim_type.php, projects/editproject.php, and general/newnotifications.php.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Webtareas Project
Products
Webtareas
CVE-2020-23069

Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a malicious user read arbitrary files.

CVSS 3.1 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Webtareas Project
Products
Webtareas
CVE-2020-14973

The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting (XSS) vulnerability via the query string.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Webtareas Project
Products
Webtareas