Projectforge - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2014-01-02.

Products

• Projectforge - 3 CVEs

Newest CVEs of Projectforge

• CVE-2013-7250 - CVSS 3.5 (low), 2014-01-02: Cross-site scripting (XSS) vulnerability in the JsonBuilder implementation in ProjectForge before 5.3 allows remote authenticated users to inject arbitrary…
• CVE-2013-7251 - CVSS 6.8 (medium), 2014-01-02: Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3 allow remote attackers to hijack the authentication of arbitrary users…
• CVE-2011-5269 - CVSS 3.5 (low), 2014-01-02: Cross-site scripting (XSS) vulnerability in ProjectForge before 3.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a…