ProjeQtor vulnerabilities
We track 2 vulnerabilities in ProjeQtor products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 27, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest ProjeQtor vulnerabilities
- 8.8 High severity
ProjeQtor: Improper Limitation of a Pathname to a Restricted Directory
ProjeQtor versions 7.0 through 12.4.3 contain a ZipSlip path traversal vulnerability in the plugin upload functionality that allows authenticated attackers with upload permissions to write files outside the intended extraction directory by crafting ZIP archive
- 9.8 Critical severity
ProjeQtor: Improper Neutralization of Special Elements used in an SQL Command
ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality where the login variable is directly concatenated into a SQL query without parameterization or sanitization. Attackers can inject arbitrary