Skip to content
OpenAdvisories

Product · ProcessMaker

ProcessMaker Open Source

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2013-10035 Public exploit

    ProcessMaker Open Source < 2.5.2 neoclassic Skin PHP Code Execution

    A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin. An authenticated user can execute arbitrary PHP code via multiple endpoints, including appFolderAjax.php, casesStartPage_Ajax.php, and cas…

    ProcessMaker ProcessMaker Open Source