WebTareas vulnerabilities

2 known vulnerabilities in WebTareas from Luiswang. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  WebTareas: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-53972Dec 22, 2025Luiswang

  WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database

• 8.8 High severity

  WebTareas: Unrestricted Upload of File with Dangerous Type

  CVE-2023-53971Dec 22, 2025Luiswang

  WebTareas 2.4 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the chat photo upload functionality. Attackers can upload a PHP file with arbitrary code to the /files/Messages/ directory and execute it d