ID de Prueba:	1.3.6.1.4.1.25623.1.0.807550
Categoría:	Web application abuses
Título:	ProjectSend Multiple Vulnerabilities (Apr 2016) - Active Check
Resumen:	ProjectSend is prone to multiple vulnerabilities.
Descripción:	Summary: ProjectSend is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - Insufficient validation of user supplied input via parameters 'status', 'files' in manage-files.php script, 'selected_clients', 'status' in 'clients.php' script, 'file' in process-zip-download.php script and 'action' in home-log.php script. - The page actions.log.export.php, users.php, users-add.php, home.php, edit-file.php and process-zip-download.php scripts fails to perform authentication checks. Vulnerability Impact: Successful exploitation will allow remote attackers to gain access to protected resources and to execute arbitrary SQL commands via different vectors. Affected Software/OS: ProjectSend r582 and probably prior. Solution: Fixes are available via the references. Update to the latest version. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.