Vulnerabilities > Webtareas Project > High

DATE CVE VULNERABILITY TITLE RISK
2022-04-20 CVE-2021-43481 SQL Injection vulnerability in Webtareas Project Webtareas 2.0/2.1/2.4
An SQL Injection vulnerability exists in Webtareas 2.4p3 and earlier via the $uq HTTP POST parameter in editapprovalstage.php.
network
low complexity
webtareas-project CWE-89
7.5
2020-09-18 CVE-2020-25733 Unrestricted Upload of File with Dangerous Type vulnerability in Webtareas Project Webtareas 2.0/2.1
webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types.
network
low complexity
webtareas-project CWE-434
7.5