SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrary SQL commands via the objectId parameter.
CVSS Vector
AV:N/AC:L/Au:N/C:P/I:P/A:PProjeqtor
APPProjeqtor3.4.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References
Related vulnerabilities
CVE-2021-42940CRITICAL9.9ten sam produkt
A Cross Site Scripting (XSS) vulnerability exists in Projeqtor 9.3.1 via /projeqtor/tool/saveAttachment.php, w...
CVE-2024-29387HIGH8.8ten sam produkt
projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component...
CVE-2018-18924HIGH8.8ten sam produkt
The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a ....
CVE-2017-11760HIGH8.8ten sam produkt
uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by u...
CVE-2024-29386MEDIUM5.4ten sam produkt
projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/critica...