455 matches found
CVE-2017-15203: Authorization Bypass Through User-Controlled Key
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user...
CVE-2017-15209: Authorization Bypass Through User-Controlled Key
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user...
CVE-2017-15197: Authorization Bypass Through User-Controlled Key
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another user...
CVE-2017-15196: Authorization Bypass Through User-Controlled Key
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another user...
CVE-2017-15199: Authorization Bypass Through User-Controlled Key
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstrated by Name, Email, Identifier, and Description...
CVE-2017-15212: Exposure of Sensitive Information to an Unauthorized Actor
In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private project of another user...
CVE-2017-15198: Exposure of Sensitive Information to an Unauthorized Actor
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of another user...
CVE-2017-15207: Authorization Bypass Through User-Controlled Key
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user...
CVE-2017-15200: Authorization Bypass Through User-Controlled Key
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user...
CVE-2017-15202: Authorization Bypass Through User-Controlled Key
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user...
CVE-2017-15211: Authorization Bypass Through User-Controlled Key
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user...
CVE-2017-15199
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstrated by Name, Email, Identifier, and Description...
CVE-2017-15197
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another user...
CVE-2017-15206
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user...
CVE-2017-15199
CVE-2017-15199 refers to a vulnerability in Kanboard prior to 1.0.47 where an authenticated user can edit metadata of another user’s private project by manipulating form data. The root cause is input/form data manipulation that affects project metadata fields such as Name, Email, Identifier, and ...
CVE-2017-15195
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a private project of another user...
CVE-2017-15198
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of another user...
CVE-2017-15204
In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user...