Skip to content
OpenAdvisories

Vendor

luiswang

3 known vulnerabilities.

Products

WebTareas 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2023-53972

    WebTareas 2.4 Unauthenticated SQL Injection via Session Cookie Parameter

    WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database…

    luiswang WebTareas
  • High 8.8
    CVE-2023-53971

    WebTareas 2.4 Authenticated Remote Code Execution via File Upload

    WebTareas 2.4 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the chat photo upload functionality. Attackers can upload a PHP file with arbitrary code to the /files/Messages/ directory and execute it …

    luiswang WebTareas