Teameyo Project Management System 1.0 - SQL Injection

Exploit Title: Teameyo - Project Management System 1.0 - SQL Injection Dork: N/A Date: 2019-01-28 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.teameyo.com/ Software Link: https://codecanyon.net/item/teameyo-project-management-system/23142804 Version: 1.0 Category: Webapps Tested on:...

Stored Cross-Site Scripting Vulnerability in Zendo Project Management Software z***-c***.php

Zendo Project Management Software is homegrown open source project management software. A stored cross-site scripting vulnerability exists in Zendo Project Management Software z-c.php. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading to...

MyT Project Management 1.5.1 - 'Charge[group_total]' SQL Injection

Exploit Title: MyT-PM 1.5.1 - 'Chargegrouptotal' SQL Injection Date: 03.01.2019 Exploit Author: Mehmet Önder Key Vendor Homepage: https://manageyourteam.net/ Software Link: https://sourceforge.net/projects/myt/ Version: v1.5.1 Category: Webapps Tested on: WAMPP @Win Software description: MyT Mana...

MyT Project Management 1.5.1 - Charge[group_total] SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MyT-PM 1.5.1 - 'Chargegrouptotal' SQL Injection Exploit Author: Mehmet Önder Key Vendor Homepage: https://manageyourteam.net/ Software Link: https://sourceforge.net/projects/myt/ Version: v1.5.1 Category: Webapps Tested on: WAMP...

Rukovoditel Project Management CRM Code Execution Vulnerability

Rukovoditel Project Management CRM is a Web-based open source project management software. The software has project management , customer management management and other functions . A remote code execution vulnerability exists in Rukovoditel Project Management CRM version 2.3.1, which stems from...

Rukovoditel Project Management CRM 2.3.1 - Remote Code Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Rukovoditel Project Management/CRM 2.3.1 - Authenticated Remote Code Execution', 'Description' = %q This module...

Arbitrary Password Reset Vulnerability in PowerProject Enterprise Project Management System

PowerProject is a WEB-based, enterprise-class, full lifecycle, universal project management platform. An arbitrary password reset vulnerability exists in the PowerProject enterprise project management system. An attacker can exploit this vulnerability to gain direct access to change arbitrary use...

qdPM 9.1 - 'filter_by' SQL Injection

Exploit Title: qdPM 9.1 - 'filterby' SQL Injection Date: 2018-11-01 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: http://qdpm.net Software Link: http://qdpm.net/download-qdpm-free-project-management Version: v9.1 Category: Webapps Tested on: XAMPP for...

qdPM 9.1 - filter_by SQL Injection

qdPM 9.1 - filterby SQL Injection Exploit Title: qdPM 9.1 - 'filterby' SQL Injection Date: 2018-11-01 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: http://qdpm.net Software Link: http://qdpm.net/download-qdpm-free-project-management Version: v9.1...

qdPM 9.1 SQL Injection

Exploit Title: qdPM 9.1 - 'filterby' SQL Injection Date: 2018-11-01 Exploit Author: Azkan Mustafa AkkuA AkkuS Contact: https://pentest.com.tr Vendor Homepage: http://qdpm.net Software Link: http://qdpm.net/download-qdpm-free-project-management Version: v9.1 Category: Webapps Tested on: XAMPP for...

[SECURITY] Fedora 29 Update: php-horde-nag-4.2.19-1.fc29

Nag is a web-based application built upon the Horde Application Framework which provides a simple, clean interface for managing online task lists i.e., todo lists. It also includes strong integration with the other Horde applications and allows users to share task lists or enable light-weight...

Rukovoditel Project Management CRM 2.3 SQL Injection

Exploit Title: Rukovoditel Project Management CRM 2.3 - 'path' SQL Injection Dork: N/A Date: 2018-10-15 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.rukovoditel.net/ Software Link: https://www.rukovoditel.net/download.php Version: 2.3 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...

Rukovoditel Project Management CRM 2.3 - path SQL Injection

Rukovoditel Project Management CRM 2.3 - path SQL Injection Exploit Title: Rukovoditel Project Management CRM 2.3 - 'path' SQL Injection Dork: N/A Date: 2018-10-15 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.rukovoditel.net/ Software Link: https://www.rukovoditel.net/download.php...

[SECURITY] Fedora 28 Update: php-horde-nag-4.2.19-1.fc28

Nag is a web-based application built upon the Horde Application Framework which provides a simple, clean interface for managing online task lists i.e., todo lists. It also includes strong integration with the other Horde applications and allows users to share task lists or enable light-weight...

[SECURITY] Fedora 27 Update: php-horde-nag-4.2.19-1.fc27

Nag is a web-based application built upon the Horde Application Framework which provides a simple, clean interface for managing online task lists i.e., todo lists. It also includes strong integration with the other Horde applications and allows users to share task lists or enable light-weight...

WSS project management system version 1.3.2 de***.php suffers from an override access vulnerability (CNVD-2018-22887)

WSS Project Management System is a browser-based collaborative office platform that integrates "Project Management", "Task Management", "Work Hour Management", "Work Log Management" and "Work Log Management". management" as one of the collaborative office platform. A vulnerability exists in de.ph...

Information Disclosure Vulnerability in WSS Project Management System Version 1.3.2

WSS Project Management System is a browser-based collaborative office platform that integrates "Project Management", "Task Management", "Work Hour Management", "Work Log Management" and "Work Log Management". management" as one of the collaborative office platform. An information disclosure...

SQL Injection Vulnerability in WSS Project Management System version 1.3.2 lo***.php

WSS Project Management System is a browser-based collaborative office platform that integrates "Project Management", "Task Management", "Work Hour Management", "Work Log Management" and "Work Log Management". management" as one of the collaborative office platform. A SQL injection vulnerability...

SQL Injection Vulnerability in WSS Project Management System Version 1.3.2 de***.php

WSS Project Management System is a browser-based collaborative office platform that integrates "Project Management", "Task Management", "Work Hour Management", "Work Log Management" and "Work Log Management". management" as one of the collaborative office platform. A SQL injection vulnerability...

WSS Project Management System version 1.3.2 suffers from an override access vulnerability

WSS Project Management System is a browser-based collaborative office platform that integrates "Project Management", "Task Management", "Work Hour Management", "Work Log Management" and "Work Log Management". management" as one of the collaborative office platform. An override access vulnerabilit...