Projeqtor vulnerabilities

Products

• Projeqtor 15

Newest

• projeqtor ProjeQtor < 12.4.4 Stored XSS via checkValidFileName() CVE-2026-41467 5.1 MediumApril 27, 2026
• projeqtor ProjeQtor < 12.4.4 Stored XSS via checkValidHtmlText() CVE-2026-41466 5.1 MediumApril 27, 2026
• projeqtor ProjeQtor < 12.4.4 Path Traversal via dynamicDialog.php CVE-2026-41465 7.1 HighApril 27, 2026
• projeqtor ProjeQtor < 12.4.4 Missing Authorization via objectDetail.php CVE-2026-41464 7.1 HighApril 27, 2026
• projeqtor ProjeQtor < 12.4.4 ZipSlip Path Traversal via uploadPlugin.php CVE-2026-41463 8.7 HighApril 27, 2026
• projeqtor ProjeQtor < 12.4.4 Unauthenticated SQL Injection via Login CVE-2026-41462 Public exploit 9.3 CriticalApril 27, 2026
• projeqtor project management ProjeQtOr Project Management 9.1.4 - Remote Code Execution CVE-2021-47819 9.3 CriticalJanuary 15, 2026
• projeqtor Projeqtor saveAttachment.php unrestricted upload CVE-2025-3169 2.3 LowApril 3, 2025
• projeqtor projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via... CVE-2024-29387 8.8 HighApril 4, 2024
• projeqtor projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component ... CVE-2024-29386 5.4 MediumApril 4, 2024
• projeqtor Cross Site Scripting (XSS) vulnerability in ProjeQtOr 11.0.2 allows a remote attacker to execute... CVE-2023-49034 6.1 MediumFebruary 20, 2024
• projeqtor A Cross Site Scripting (XSS) vulnerability exists in Projeqtor 9.3.1 via /projeqtor/tool... CVE-2021-42940 9.9 CriticalFebruary 11, 2022
• projeqtor The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by... CVE-2018-18924 Public exploit 8.8 HighNovember 4, 2018
• projeqtor uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary... CVE-2017-11760 8.8 HighJuly 31, 2017
• projeqtor SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote... CVE-2013-6164 Public exploit 7.5 HighNovember 14, 2013
• projeqtor Multiple cross-site scripting (XSS) vulnerabilities in ProjeQtOr (formerly Project'Or RIA) before... CVE-2013-6163 4.3 MediumNovember 14, 2013