WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)

Software Organization chart Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24387 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0fde8648ea22 Credits yuyudhn Required...

Organization Chart < 1.4.5 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Organization chart Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-24384 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3c7c36f42e17 Credits yuyudhn Required...

WordPress Organization chart plugin <= 1.4.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Lana Codes Patchstack Alliance in the WordPress Organization chart plugin versions = 1.4.1. Solution Update the WordPress Organization chart plugin to the latest available version at least 1.4.2...

Oracle PeopleSoft Products PeopleSoft Enterprise HCM Human Resources Component Security Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM Human Resources is one of the human resource management components...

CVE-2018-2654

Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products subcomponent: Company Dir / Org Chart Viewer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Microsoft Organization Chart 2 - Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31059/info Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation. Remote attackers can exploit this issue by enticing victims into opening a maliciously crafte...

Oracle Portal Demo Organization Chart PL/SQL Injection

============================================= INTERNET SECURITY AUDITORS ALERT 2012-001 - Original release date: November 8th, 2012 - Last revised: March 20th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 7,1/10 CVSS Base Score - CVE-ID: CVE-2013-3831...

CVE-2008-3956

orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted .opx file...

Code injection

orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted .opx file...

Microsoft Organization Chart远程代码执行漏洞

BUGTRAQ ID: 31059 CNCAN ID：CNCAN-2008090904 MS Organization Chart是一款微软开发的组织结构图开发工具。 MS Organization Chart处理特殊组织图文档存在问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 处理特殊构建的.opx文件时存在内存访问冲突，诱使用户打开可导致以应用程序权限执行任意指令。 Microsoft Org Chart 2.00,19 Microsoft Org Chart 2 目前没有解决方案提供： http://www.microsoft.com/ 可参考如下测试程序：...

Microsoft Organization Chart Remote Code Execution Vulnerability

The host has Microsoft Organization Chart, which is prone to a remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodmsorgchartremotecodeexevuln900120.nasl 7293 2017-09-27 08:49:48Z cfischer $ Description: Microsoft Organization Chart Remote Code Execution Vulnerability...

Microsoft Organization Chart RCE Vulnerability

The host has Microsoft Organization Chart, which is prone to a remote code execution vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2008-3956

orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted .opx file...

CVE-2008-3956

CVE-2008-3956 affects Microsoft Organization Chart 2.00. The vulnerability arises when processing a specially crafted .opx file, enabling user-assisted attackers to cause an application crash (DoS) and potentially execute arbitrary code. All available connected documents corroborate the same impa...

CVE-2008-3956: Improper Control of Generation of Code

orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted .opx file...

Microsoft Organization Chart 2 - Remote Code Execution

source: https://www.securityfocus.com/bid/31059/info Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation. Remote attackers can exploit this issue by enticing victims into opening a maliciously crafted Organization Chart document...