Advisories · Technology
Alanaktion phproject.
Every CVE that names Alanaktion phproject among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Phproject < 1.8.7 Missing Authorization via Issues REST API
- Alanaktion phproject
- Broken access control
- CVSS 6.9 Medium
Stored XSS in “hours” fields when creating or editing an issue, using SQLite database
- Alanaktion phproject
- Cross-site scripting (XSS)
- CVSS 9.9 CriticalCritical · CVSS 9+
RCE via file upload in Phproject
- Alanaktion Phproject
- Unrestricted file upload