Sploitus

23 exploited vulnerabilities in Projectsend

Vulnerabilities with publicly known exploits

Vendors
Unknown, Projectsend, Git
With known exploits
23
Affected Projectsend versions
< R1720, R1295, 100, 102, 105, 110, 155, 156, 157, 161, 180, 335, 375, 405, 412, 514, 561

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2024-11680 3 exploits
CVSS 10.0 CRITICAL 2024-11-26FIX AVAILABLE
Exploit for Missing Authentication for Critical Function in ProjectsendExploit for Improper Authentication in Projectsend
CVE-2021-40887
CVSS 10.0 CRITICAL 2021-10-11FIX AVAILABLE
CVE-2023-53980
CVSS 9.8 CRITICAL 2025-12-22FIX AVAILABLE
CVE-2017-9741
CVSS 9.8 CRITICAL 2017-06-18FIX AVAILABLE
CVE-2019-11378
CVSS 8.8 HIGH 2019-04-20FIX AVAILABLE
CVE-2021-40884
CVSS 8.1 HIGH 2021-10-11FIX AVAILABLE
CVE-2023-53905
CVSS 8.0 HIGH 2025-12-17
CVE-2023-53930
CVSS 7.5 HIGH 2025-12-17FIX AVAILABLE
CVE-2020-28874 1 exploit
CVSS 7.5 HIGH 2021-01-21FIX AVAILABLE
Exploit for Improper Authentication in Projectsend
CVE-2014-9567 2 exploits
CVSS 7.5 HIGH 2015-01-07FIX AVAILABLE
ProjectSend - Arbitrary File Upload (Metasploit)ProjectSend r-561 - Arbitrary File Upload
CVE-2023-0607
CVSS 7.2 HIGH 2023-02-01FIX AVAILABLE
CVE-2024-7658
CVSS 6.9 MEDIUM 2024-08-11FIX AVAILABLE
CVE-2026-3977
CVSS 6.5 MEDIUM 2026-03-12FIX AVAILABLE
CVE-2021-40886
CVSS 6.5 MEDIUM 2021-10-11FIX AVAILABLE
CVE-2015-2564 1 exploit
CVSS 6.5 MEDIUM 2015-03-20FIX AVAILABLE
ProjectSend r561 - SQL Injection
CVE-2021-47947
CVSS 6.4 MEDIUM 2026-05-10
CVE-2024-7659
CVSS 6.3 MEDIUM 2024-08-11FIX AVAILABLE
CVE-2017-20101
CVSS 5.7 MEDIUM 2022-06-27
CVE-2021-40888
CVSS 5.4 MEDIUM 2021-10-11
CVE-2023-53906
CVSS 5.1 MEDIUM 2025-12-17FIX AVAILABLE
CVE-2026-5624
CVSS 5.0 MEDIUM 2026-04-06FIX AVAILABLE
CVE-2014-9580 1 exploit
CVSS 4.3 MEDIUM 2015-01-08FIX AVAILABLE
ProjectSend r561 - Multiple Vulnerabilities
CVE-2025-13232
CVSS 4.0 MEDIUM 2025-11-16FIX AVAILABLE