Approved changes feed: RSS · Atom

cpe:2.3:a:projectsend:projectsend:405:*:*:*:*:*:*:*

part: a version: 405 update: *

VendorProjectsend (756ba587-ea60-54ee-9d3e-01949cd8119b)
ProductProjectsend (25fe9e81-065f-5d3c-a2eb-36513b7100a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/projectsend/projectsend purl2cpe 2026-06-01 10:17:15.076714

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9567 vulnerable 2026-06-08 05:06:12.150842 Details available
Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the upload/files/ or upload/temp/ directory.
Published: 2015-01-07T18:00:00.000Z
Updated: 2024-08-06T13:47:41.739Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.