Projectsend CVE-2019-11492

HIGH

Insertion of Sensitive Information into Log File (CWE-532)

2019-04-26 cve@mitre.org

Information Disclosure Projectsend

7.5

CVSS 3.0 · NVD

Share

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

1

CVE Published

Apr 26, 2019 - 21:29 nvd

HIGH 7.5

DescriptionNVD

ProjectSend before r1070 writes user passwords to the server logs.

AnalysisAI

ProjectSend before r1070 writes user passwords to the server logs. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-532. ProjectSend before r1070 writes user passwords to the server logs. Affected products include: Projectsend.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Projectsend

View all

CVE-2024-11680 CRITICAL Act Now POC

ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Rated critical severity (C

CVE-2014-9567 HIGH Act Now POC

Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows rem

CVE-2017-9741 CRITICAL Act Now POC

install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix param

CVE-2021-40887 CRITICAL Act Now POC

Projectsend version r1295 is affected by a directory traversal vulnerability. Rated critical severity (CVSS 9.8), this v

CVE-2019-11378 HIGH This Week POC

An issue was discovered in ProjectSend r1053. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable

CVE-2021-40884 HIGH This Week POC

Projectsend version r1295 is affected by sensitive information disclosure. Rated high severity (CVSS 8.1), this vulnerab

CVE-2020-28874 HIGH This Week POC

reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business

CVE-2015-2564 MEDIUM This Month POC

SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to

CVE-2021-40886 MEDIUM This Month POC

Projectsend version r1295 is affected by a directory traversal vulnerability. Rated medium severity (CVSS 6.5), this vul

CVE-2021-40888 MEDIUM This Month POC

Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in

CVE-2014-9580 MEDIUM This Month POC

Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote attackers to inject arbitrary

CVE-2023-0607 MEDIUM This Month POC

Cross-site Scripting (XSS) - Stored in GitHub repository projectsend/projectsend prior to r1606. Rated medium severity (

Same weakness CWE-532 – Insertion of Sensitive Information into Log File

View all

CVE-2023-43261 HIGH POC

CVE-2025-24984 MEDIUM

CVE-2017-8075 CRITICAL POC

CVE-2017-8074 CRITICAL POC

CVE-2026-22778 CRITICAL POC

CVE-2019-17395 CRITICAL POC

CVE-2019-17398 CRITICAL POC

CVE-2019-17394 CRITICAL POC

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2019-11492 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy