SQL Injection Vulnerability in Kin Man Project Management System

Jianwen project management system is a .net developed cycle management system applied to a variety of engineering projects Jianwen Project Management System suffers from SQL injection vulnerability and arbitrary file upload vulnerability: SQL injection vulnerability URL is:...

Unspecified Vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (CNVD-2016-05451)

Oracle Primavera is a set of Oracle Oracle for project-intensive industries enterprise project portfolio management EPPM solution. The solution helps organizations assess project risks and rewards, determine the resources and skills needed to get the job done, and more. A security vulnerability i...

The vulnerability of the Microsoft Project project management software allows a remote attacker to execute arbitrary code and gain control over the system.

Microsoft Project software has vulnerabilities related to errors that occur during the processing of specially crafted files. Exploiting these vulnerabilities allows a malicious attacker to execute arbitrary code and gain full control over the system...

Multiple Vulnerabilities in HPE Project and Portfolio Management Center

HPE Project and Portfolio Management Center PPM is a suite of solutions from Hewlett Packard Enterprise HPE that provides project executives with the visibility and strategic operational needs to make decisions based on real-time visibility into the project lifecycle of the project portfolio. An...

Debian Security Advisory DSA 3529-1 (redmine - security update)

Multiple vulnerabilities have been found in Redmine, a project management web application, which may result in information disclosure. OpenVAS Vulnerability Test $Id: deb3529.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3529-1 using nvtgen 1.0 Script version: 1.0...

Debian: Security Advisory (DSA-3529-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Redmine Information Disclosure Vulnerability

Redmine is a set of open source Web-based project management and defect tracking tools . An information disclosure vulnerability exists in Redmine. An attacker can exploit this vulnerability to obtain sensitive information...

用友项目管理系统设计不当可以登入获取大量敏感信息

简要描述： 用友项目管理系统设计不当可以登入获取大量敏感信息 详细说明： 用友产品缺陷管理系统使用了JIRA，对外网开放了后台访问和注册权限，导致可以任意注册用进行登录查看相关项目信息 泄露后台：http://123.103.9.112/login.jsp 注册地址：http://123.103.9.112/secure/Signup!default.jspa 漏洞证明：...

Celoxis 9.5 Cross Site Scripting Vulnerability

Celoxis versions 9.5 and below suffer from a cross site scripting vulnerability. ================================================================ Celoxis alert"XSS" Advisory Timeline -------------------- 08/10/2015 - Informed Vendor about Issue 08/10/2015 - Vendor responded 12/11/2015 - Reminded...

Celoxis 9.5 Cross Site Scripting

================================================================ Celoxis alert"XSS" Advisory Timeline -------------------- 08/10/2015 - Informed Vendor about Issue 08/10/2015 - Vendor responded 12/11/2015 - Reminded Vendor 14/11/2015 - Vendor responded saying 'they changed the framework itself to...

SO Planning Path Traversal Vulnerability

SO Planning is a free and open source set of online project production and management tools. SO Planning suffers from a path traversal vulnerability. An attacker can exploit this vulnerability to detect arbitrary remote files...

SO Planning SQL Injection Vulnerability

SO Planning is a free and open source set of online project production and management tools. SO Planning is vulnerable to a SQL injection vulnerability. The vulnerability is due to the program failing to adequately filter user-submitted input before constructing SQL query statements. An attacker...

SO Planning 1.32 - Multiple Vulnerabilities

SO Planning 1.32 - Multiple Vulnerabilities SOPlanning - Simple Online Planning Tool multiple vulnerabilities CVEs: CVE-2014-8673, CVE-2014-8674, CVE-2014-8675, CVE-2014-8676, CVE-2014-8677 Vendor: http://www.soplanning.org/ Product: SOPlanning - Simple Online Planning Version affected: 1.32 and...

Microsoft Office Project Memory Validation Remote Code Execution (MS09-074) - Ver2 (CVE-2009-0102)

Microsoft Project is a project management software program designed to assist project managers to stay informed, keep project teams aligned, increase productivity and control project work, schedules, and finances. A remote code execution vulnerability has been identified in the way Microsoft...

WSS项目管理系统越权修改信息密码

简要描述： 再也不用担心老大给任务了 详细说明： 公司一直用的是wss 1.3.2 无聊中想去看看这个有没有洞 明天要上班，大晚上的也不想去分析代码了，就用黑盒去试了一试 在用户这个地方，每个用户都有一个recordID 用自己公司的wss来做示范，当然是用基友的账号了，老大的可不敢动 先问一下基友的密码是多少 然后去修改自己的资料 抓包，将自己的ID改成基友的ID，他的ID是11，我的是14 改成六个2之后提示修改正确，然后去登陆看看 登陆成功！ 然后我去告诉他之后，唉。 img s...

JExperts Tecnologia / Channel Software Multiple Vulnerabilities

JExperts Tecnologia / Channel software version 5.0.33CCB allows for authorization bypass / privilege escalation via tampering with parameters in the GET request and a cross site scripting vulnerability. CVE-2014-8558 - JExperts Tecnologia / Channel Software Escalation Access Issues Vendor Notifie...

insight.ly Cross Site Scripting

Author:Provensec Vendor: insight.ly Vulnerability Type:persistent xss Discription: Integrated online customer relationship management CRM and project management makes sure you are on top of critical business processes. Exploit: 1 Goto add contacts 2 Fill the work address field with xss payload...

qdPM 7 - Arbitrary File upload

No description provided by source. Exploit qdPM v.7 Arbitrary File upload Date: June 13th 2012 Author: loneferret Version: 7 Vendor Url: http://qdpm.net/ Tested on: Winddows XP / XAMPP Discovered by: loneferret Software description: Free project management tool for small team qdPM is a free...

Collabtive SQL Injection Vulnerability

No description provided by source. ANATOLIA SECURITY ADVISORY --------------------------- ADVISORY INFO + Title: Collabtive SQL Injection Vulnerability + Advisory URL: http://www.anatoliasecurity.com/adv/as-adv-2010-004.txt + Advisory ID: 2010-004 + Version: 0.65 + Date: 12/10/2010 + Impact:...

dotproject <= 2.1.6 - Remote File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com 2012-11-13 dotProject = 2.1.6 Remote File Inclusion Vulnerability Script: PHP web-based project...