Dotproject vulnerabilities

Products

• Dotproject 15

Newest

• dotproject Multiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote... CVE-2012-5702 Public exploit 4.3 MediumOctober 21, 2014
• dotproject Multiple SQL injection vulnerabilities in dotProject before 2.1.7 allow remote authenticated... CVE-2012-5701 Public exploit 6.8 MediumOctober 20, 2014
• dotproject dotproject 2.1.4 allows remote attackers to obtain sensitive information via a direct request to... CVE-2011-3729 5.0 MediumSeptember 23, 2011
• dotproject dotProject before 2.1.2 does not properly restrict access to administrative pages, which allows... CVE-2008-6747 6.8 MediumApril 23, 2009
• dotproject Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow (1) remote... CVE-2008-3887 6.0 MediumSeptember 2, 2008
• dotproject Multiple cross-site scripting (XSS) vulnerabilities in index.php in dotProject 2.1.2 allow remote... CVE-2008-3886 4.3 MediumSeptember 2, 2008
• dotproject dotProject before 2.1 does not properly check privileges when invoking the Companies module,... CVE-2007-5486 6.4 MediumOctober 16, 2007
• dotproject Cross-site scripting (XSS) vulnerability in dotProject before 2.1 RC2 allows remote attackers to... CVE-2007-3226 4.3 MediumJune 14, 2007
• dotproject PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and... CVE-2006-4234 Public exploit 7.5 HighAugust 18, 2006
• dotproject Cross-site scripting (XSS) vulnerability in classes/ui.class.php in dotProject 2.0.3 and earlier... CVE-2006-3240 4.3 MediumJune 27, 2006
• dotproject Cross-site scripting (XSS) vulnerability in index.php in dotProject 2.0.2 and earlier allows... CVE-2006-2851 4.3 MediumJune 6, 2006
• dotproject ** DISPUTED ** dotProject 2.0.1 and earlier leaves (1) phpinfo.php and (2) check.php accessible... CVE-2006-0756 Disputed 5.0 MediumFebruary 18, 2006
• dotproject ** DISPUTED ** Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier,... CVE-2006-0755 Public exploitDisputed 5.1 MediumFebruary 18, 2006
• dotproject ** DISPUTED ** dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive... CVE-2006-0754 Disputed 5.0 MediumFebruary 18, 2006
• dotproject index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or... CVE-2002-1428 Public exploit 10.0 HighMarch 18, 2003