Microsoft Office Project Memory Validation Remote Code Execution (MS09-074; CVE-2009-0102)

Microsoft Project is a project management software program designed to assist project managers to stay informed, keep project teams aligned, increase productivity and control project work, schedules, and finances. A remote code execution vulnerability has been identified in the way Microsoft...

GForge Detection

The remote host is running GForge, an open source web-based project-management and collaboration software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42963; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

JVN#01245481 Redmine vulnerable to cross-site scripting

Redmine is a project management software. Redmine contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. As a result, cookie information may be leaked and could lead to session hijacking or user impersonation. Solution Update the...

JVN#87341298 Redmine vulnerable to cross-site request forgery

Redmine is a project management software. Redmine contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged into Redmine, an arbitrary ticket may be deleted. Solution Update the Software Update to the latest version according to the information...

[SECURITY] Fedora 11 Update: monodevelop-2.0-6.fc11

This package provides MonoDevelop, a full-featured IDE for Mono with syntax colouring, code completion, debugging, project management and support for C sharp, Visual Basic.NET, Java, Boo, Nemerle and MSIL...

SA-CONTRIB-2009-089 - Storm - Access Bypass

The Storm module provides a project management application for Drupal. The module suffers a vulnerability whereby nodes of type 'storminvoiceitem' are not respecting the expected access permissions, potentially exposing the node title to unauthorized users. Versions affected Versions of Storm for...

[SECURITY] Fedora 11 Update: monodevelop-2.0-5.fc11

This package provides MonoDevelop, a full-featured IDE for Mono with syntax colouring, code completion, debugging, project management and support for C sharp, Visual Basic.NET, Java, Boo, Nemerle and MSIL...

JVN#55752635 Cross-site scripting vulnerability in activeCollab

activeCollab from A51 D.O.O. is software for project management. activeCollab contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software According to the vendor, activeCollab 0.x is no longer being developed or...

(GET vars 'x' & 'y') ADMIN FUNCTION EXECUTION--Jorp v-1.3.05.09-->

-------------------------------------------------------------------- GET vars 'x' & 'y' ADMIN FUNCTION EXECUTION--Jorp v-1.3.05.09-- -------------------------------------------------------------------- CMS INFORMATION: --WEB: http://jorp.sourceforge.net/ --DOWNLOAD: http://jorp.sourceforge.net/...

Jorp 1.3.05.09 Remote Arbitrary Remove Projects/Tasks Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

Jorp 1.3.05.09 Remove Projects/Tasks

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://jorp.sourceforge.net/ | |--DOWNLOAD: http://jorp.sourceforge.net/ | |--DEMO: http://jorp.short-s...

Jorp 1.3.05.09 - Arbitrary Remove ProjectsTasks

Jorp 1.3.05.09 - Arbitrary Remove ProjectsTasks || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Jorp 1.3.05.09 Remote Arbitrary Remove Projects/Tasks Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== Jorp 1.3.05.09 Remote Arbitrary Remove Projects/Tasks Vulnerabilities =====================================================================...

Jorp 1.3.05.09 - Arbitrary Remove Projects/Tasks

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | GET vars 'x'...

FogBugz Interface Detection

The remote web server is running the web interface for FogBugz, a web interface for a project management software As this interface is likely to contain sensitive information, make sure only authorized personel can log into this site C Tenable Network Security, Inc. include"compat.inc"; if...

SAP Cfolders Multiple Stored XSS Vulnerabilies

Digital Security Research Group DSecRG Advisory DSECRG-09-014 Original advisory: http://dsecrg.com/pages/vul/show.php?id=114 Application: SAP Cfolders included in: SAP SRM, SAP ECC, SAP Knowledge Management and SAP NetWeaver cRooms Vendor URL: http://SAP.com Bugs: Multiple Stored XSS Risk: Hight...

CVE-2009-0280

Asp Project Management 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the crypt cookie to 1...

CVE-2009-0280

CVE-2009-0280 affects Asp Project Management 1.0 . The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the crypt cookie to 1. The provided documents do not include explicit remediation details or patched versions.

celoxis-xss.txt

==Background== From Celoxis.com: Celoxis is a comprehensive web based project management tool to improve collaboration and streamline management of projects, time sheets, expenses and even business processes specific to your organization ==Problem== The Celoxis project management software contain...

[SECURITY] Fedora 9 Update: trac-0.10.5-1.fc9

Trac is an integrated system for managing software projects, an enhanced wiki, a flexible web-based issue tracker, and an interface to the Subversion revision control system. At the core of Trac lies an integrated wiki and issue/bug database. Using wiki markup, all objects managed by Trac can...