cbcvebase.

Processmaker Inc Processmaker Open Source vulnerabilities

1 known vulnerability affecting processmaker_inc/processmaker_open_source.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2013-10035P2HIGHCVSS 8.7PoC≥ 2.0, < 2.5.22025-07-31
CVE-2013-10035 [HIGH] CWE-94 CVE-2013-10035: A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the defaul A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin. An authenticated user can execute arbitrary PHP code via multiple endpoints, including appFolderAjax.php, casesStartPage_Ajax.php, and cases_SchedulerGetPlugins.php, by supplying crafted POST requests to parameters such as action and
nvd