USN-4590-1: Collabtive vulnerability

It was discovered that Collabtive did not properly validate avatar image file uploads. An authenticated user could exploit this with a crafted file to cause Collabtive to execute arbitrary code. CVE-2015-0258...

SOPlanning Authentication Bypass Vulnerability

SOPlanning is an online project management software. An authentication bypass vulnerability exists in versions prior to SoPlanning 1.47. The vulnerability stems from the program not properly checking the security key used to publicly share the planning solution. An attacker could use this...

There are SQL injection vulnerabilities in the backend of Zendo open source version of Qingdao Yiqi Tianchuang Management Consulting Co.

Zendo Open Source Edition is a research and development project management software. There is a SQL injection vulnerability in the backend of Zendo Open Source Edition of Qingdao Yiqi Tianchuang Management Consulting Co. An attacker can exploit this vulnerability to obtain sensitive information...

Qingdao Yiqi Tianchuang Management Consulting Co., Ltd. Zendo open source version of the existence of arbitrary file read vulnerability

Zendo Open Source Edition is a research and development project management software. Qingdao Yiqi Tianchuang Management Consulting Co., Ltd Zendo Open Source Edition There is an arbitrary file read vulnerability, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Zendo Enterprise Edition

Zendo Enterprise Edition is open source project management software. Zendo Enterprise Edition suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CVE-2020-7246

A remote code execution RCE vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code file via the profile photo functionality, by leveraging a path traversal vulnerability in the users'photoppreview' delete photo feature, allowing bypass of .htaccess protection...

Arbitrary File Read Vulnerability in Zendo Project Management System

Zendo project management system developed by Qingdao Easoft Tianchuang Network Technology Co., Ltd, domestic open source project management software. It integrates product management, project management, quality management, document management, organizational management and transaction management...

Design flaws in the backend of Zendo project management software of Qingdao Easoft Tianchuang Network Technology Co.

Zendo is open source free project management software. Qingdao Easoft Tianchuang Network Technology Co., Ltd Zendo project management software backend there are design flaws vulnerabilities. Allow attackers to use the background sql query function to write webshell and gain server privileges...

The vulnerability of the Microsoft Project project management software allows a remote attacker to execute arbitrary code and gain control over the system.

Microsoft Project software has vulnerabilities related to errors that occur during the processing of specially crafted files. Exploiting these vulnerabilities allows a malicious attacker to execute arbitrary code and gain full control over the system...

Microsoft Office Project Memory Validation Remote Code Execution (MS09-074) - Ver2 (CVE-2009-0102)

Microsoft Project is a project management software program designed to assist project managers to stay informed, keep project teams aligned, increase productivity and control project work, schedules, and finances. A remote code execution vulnerability has been identified in the way Microsoft...

Collabtive 1.2 - Persistent Cross-Site Scripting

Collabtive 1.2 - Persistent Cross-Site Scripting Vulnerability title: Stored XSS vulnerability in Collabtive application CVE-2014-3247 CVE: CVE-2014-3247coordinated with cve assigning team and vendor Vendor: Collabtive Product: Collabtive Open Source Project Management Software Affected version:...

Collabtive 1.2 - SQL Injection

Collabtive 1.2 - SQL Injection Vulnerability title: SQL Injection / SQL Error message in Collabtive application CVE-2014-3246 CVE: CVE-2014-3246 cordinated with Vendor: Collabtive Product: Collabtive Open Source Project Management Software Affected version: 1.12 Fixed version: 2.0 Reported by:...

[ISecAuditors Security Advisories] SQL Injection vulnerability in "Project'Or RIA" allow arbitrary access to the database and the file system

============================================= INTERNET SECURITY AUDITORS ALERT 2013-017 - Original release date: July 26th, 2013 - Last revised: July 26th, 2013 - Discovered by: Vicente Aguilera Diaz - Severity: 6.8/10 CVSSv2 Base Scored - CVE-ID: CVE-2013-6164...

ProjectOr RIA 3.4.0 - objectDetail.php?objectId SQL Injection

ProjectOr RIA 3.4.0 - objectDetail.php?objectId SQL Injection ============================================= INTERNET SECURITY AUDITORS ALERT 2013-017 - Original release date: July 26th, 2013 - Last revised: July 26th, 2013 - Discovered by: Vicente Aguilera Diaz - Severity: 6.8/10 CVSSv2 Base Scor...

Project'Or RIA 3.4.0 Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2013-018 - Original release date: July 26th, 2013 - Last revised: July 26th, 2013 - Discovered by: Vicente Aguilera Diaz - Severity: 4.3/10 CVSSv2 Base Scored - CVE-ID: CVE-2013-6163...

qdPM 7 Arbitrary PHP File Upload Vulnerability

Exploit for php platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Arbitrary File Upload/Execution in Collabtive

TITLE: Arbitrary File Upload/Execution in Collabtive DATE: 06-04-2012 PRODUCT: Collabtive Web-Based Project Management Software http://collabtive.o-dyn.de/ VERSIONS: 0.7.5, 0.6.1 confirmed. All versions = 0.7.5 probable RESEARCHER: Mark Hoopes [email protected]/ ADDITIONAL INFORMATION:...

Freelancer Kit v2.35 - Multiple Web Vulnerabilities

Document Title: =============== Freelancer Kit v2.35 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=402 Release Date: ============= 2012-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 402...

Traq 'authenticate()'函数远程代码执行漏洞

Bugtraq ID: 50961 Traq是一款基于PHP/MySQL的项目管理软件 定义在/admincp/common.php中的authenticate函数存在错误： 27. function authenticate 28. 29. global $user; 30. 31. if!$user-group'isadmin' 32. header"Location: login.php"; 33...

Collabtive v0.6.3 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================== Collabtive v0.6.3 Multiple Vulnerabilities ========================================== !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use HTTP::Cookies; use Getopt::Long; '/ -.-...