Projectpier

10 CVEs across 1 Projectpier products. Browse Projectpier vulnerabilities, severities, and proof-of-concept exploits.

Projectpier products with known CVEs

ProductCVEs
Projectpier10
Projectpier CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2012-100362025-08-08Project Pier 0.8.8 and earlier contains an unauthenticated arbitrary file upload vulnerability in tools/upload_file.php. The upload handler fails to validate t…
CVE-2013-3637Medium5.42020-02-07ProjectPier 0.8.8 does not use the Secure flag for cookies
CVE-2013-3636Medium5.42020-02-07ProjectPier 0.8.8 has a Remote Information Disclosure Weakness because of the lack of the HttpOnly cookie flag
CVE-2013-3635Medium5.42020-02-07ProjectPier 0.8.8 has stored XSS
CVE-2018-10760High8.82018-05-16Unrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows remote authenticated users to execute arbitrary PHP code by u…
CVE-2018-10759Critical9.82018-05-16PHP remote file inclusion vulnerability in public/patch/patch.php in Project Pier 0.8.8 and earlier allows remote attackers to execute arbitrary commands or SQ…
CVE-2015-2796Medium6.12018-02-02Multiple cross-site scripting (XSS) vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the sear…
CVE-2011-37972011-09-24ProjectPier 0.8.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an erro…
CVE-2008-55842008-12-15Multiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) a mess…
CVE-2008-55832008-12-15Cross-site request forgery (CSRF) vulnerability in index.php in ProjectPier 0.8 and earlier allows remote attackers to perform actions as an administrator via…