31 matches found
CVE-2009-1732
Cross-site scripting XSS vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitrary web script or HTML via the grp parameter...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that 1 change the password, 2 add users, or 3 delete users via unknown vectors...
CVE-2009-1732
Cross-site scripting XSS vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitrary web script or HTML via the grp parameter...
CVE-2009-1733
Cross-site request forgery CSRF vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that 1 change the password, 2 add users, or 3 delete users via unknown vectors...
CVE-2009-1732
CVE-2009-1732 is a cross-site scripting (XSS) vulnerability affecting ipplan in the admin/usermanager module, caused by insufficient sanitising of the grp parameter. Remote attackers could inject arbitrary HTML/JavaScript to execute in a user’s browser. Public disclosures tie this to IPplan 4.91a...
CVE-2009-1733
Cross-site request forgery CSRF vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that 1 change the password, 2 add users, or 3 delete users via unknown vectors...
CVE-2009-1733
CVE-2009-1733 describes a CSRF vulnerability in IPplan 4.91a that can allow an attacker to hijack administrator authentication to perform actions such as changing passwords and adding or deleting users, via unknown vectors. The affected software is IPplan (web admin interface), with the underlyin...
CVE-2009-1732
Cross-site scripting XSS vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitrary web script or HTML via the grp parameter...
CVE-2009-1733: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that 1 change the password, 2 add users, or 3 delete users via unknown vectors...
CVE-2009-1732: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitrary web script or HTML via the grp parameter...
[SA12960] IPplan Unspecified SQL Injection Vulnerabilities
TITLE: IPplan Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA12960 VERIFY ADVISORY: http://secunia.com/advisories/12960/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From local network SOFTWARE: IPplan 3.x http://secunia.com/product/4131/ DESCRIPTION: Some...