Security Advisory

CVE-2021-47819

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-15 15:52:16

Last updated 2026-03-05 01:28:46

Assigner VulnCheck

CVSS score 9.3

State PUBLISHED

Description

ProjeQtOr Project Management 9.1.4 contains a file upload vulnerability that allows guest users to upload malicious PHP files with arbitrary code execution capabilities. Attackers can upload a PHP script through the profile attachment section and execute system commands by accessing the uploaded file with a specially crafted request parameter.

← Browse all CVEs View on cve.org ↗