Dotproject

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-5702 MEDIUM POC PATCH This Month

Multiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) callback parameter in a color_selector action,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS PHP Dotproject

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

0.9%

CVE-2012-5701 MEDIUM POC PATCH This Month

Multiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search_string or (2) where parameter in a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available.

CSRF PHP SQLi Dotproject

NVD Exploit-DB

CVSS 2.0

6.8

EPSS

2.7%

CVE-2012-5702

EPSS 1% CVSS 4.3

MEDIUM POC PATCH This Month

XSS PHP Dotproject

NVD Exploit-DB

CVE-2012-5701

EPSS 3% CVSS 6.8

MEDIUM POC PATCH This Month

CSRF PHP SQLi +1

NVD Exploit-DB