Skip to content
OpenAdvisories

Vendor

ProjectSend

12 known vulnerabilities.

Products

ProjectSend 11 projectsend/projectsend 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-53980

    ProjectSend r1605 Remote Code Execution via File Extension Manipulation

    ProjectSend r1605 contains a remote code execution vulnerability that allows attackers to upload malicious files by manipulating file extensions. Attackers can upload shell scripts with disguised extensions through the upload.process.php endpoint to execute a…

    ProjectSend ProjectSend
  • Critical 9.8
    CVE-2024-11680 Exploited Public exploit EPSS 92%

    ProjectSend Unauthenticated Configuration Modification

    ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw by sending crafted HTTP requests to options.php, enabling unauthorized modification of the application's conf…

    ProjectSend ProjectSend
    KEV Dec 3, 2024