Sploitus

11 exploited vulnerabilities in Dotproject

Vulnerabilities with publicly known exploits

Vendors
Dotproject, Microsoft
With known exploits
11
Affected Dotproject versions
= 0.2.1.5, 2.0, 2.0.1, 2.0.2, 2.0.4, 2.1.6

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2002-1428 1 exploit
CVSS 10.0 HIGH 2003-03-18
dotProject 0.2.1 - User Cookie Authentication Bypass
CVE-2006-4234 1 exploit
CVSS 7.5 HIGH 2006-08-18FIX AVAILABLE
dotProject 2.0.4 - 'baseDir' Remote File Inclusion
CVE-2012-5701 3 exploits
CVSS 6.8 MEDIUM 2014-10-20FIX AVAILABLE
dotProject 2.1.6 Cross Site Scripting / SQL InjectiondotProject 2.1.x - 'index.php' Multiple SQL Injections
CVE-2008-3887
CVSS 6.0 MEDIUM 2008-09-02FIX AVAILABLE
CVE-2006-0755 10 exploits
CVSS 5.6 MEDIUM 2006-02-18FIX AVAILABLE
dotProject 2.1.6 - Remote File InclusiondotProject 2.0 - '/modules/public/calendar.php?baseDir' Remote File Inclusion
CVE-2011-3729
CVSS 5.0 MEDIUM 2011-09-23FIX AVAILABLE
CVE-2006-0756
CVSS 5.0 MEDIUM 2006-02-18FIX AVAILABLE
CVE-2006-0754
CVSS 5.0 MEDIUM 2006-02-18
CVE-2012-5702 3 exploits
CVSS 4.3 MEDIUM 2014-10-21FIX AVAILABLE
dotProject 2.1.6 Cross Site Scripting / SQL InjectiondotProject 2.1.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-3886
CVSS 4.3 MEDIUM 2008-09-02FIX AVAILABLE
CVE-2006-2851
CVSS 4.3 MEDIUM 2006-06-06FIX AVAILABLE