248 matches found
CVE-2020-13963
SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp which is a guest account...
SOPlanning 信任管理问题漏洞
SOPlanning is an online planning tool for efficiently organizing projects and tasks. An authentication bypass vulnerability exists in SOPlanning 1.45 - 1.47. An attacker can exploit this vulnerability to completely bypass administrator and guest user authentication by forging a valid cookie...
SOPlanning Authentication Bypass Vulnerability
SOPlanning is an online project management software. An authentication bypass vulnerability exists in versions prior to SoPlanning 1.47. The vulnerability stems from the program not properly checking the security key used to publicly share the planning solution. An attacker could use this...
CVE-2020-25867
SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication...
CVE-2020-25867
SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication...
Authentication flaw
SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication...
CVE-2020-25867
SOPlanning is affected by an authentication bypass vulnerability. Versions prior to 1.47 fail to properly validate the security key used to publicly share planning solutions, allowing an attacker to bypass authentication and gain access to plannings. The issue is documented across multiple source...
CVE-2020-25867
SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication...
SOPlanning Cross-Site Scripting Vulnerability
SOPlanning is an online project management software. A cross-site scripting vulnerability exists in SOPlanning version 1.46.01. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side co...
CVE-2020-15597
SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...
CVE-2020-15597
SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...
Cross site scripting
SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...
CVE-2020-15597
SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...
CVE-2020-15597
CVE-2020-15597 affects SOPlanning prior to or at version 1.46.01, where persistent XSS is possible through input fields Project Name, Statutes Comment, Places Comment, or Resources Comment due to insufficient input validation. The vulnerability is described across multiple sources (NVD, Red Hat a...
SOPlanning Cross-Site Scripting Vulnerability
SOPlanning is an online planning tool for efficiently organizing projects and tasks. A cross-site scripting vulnerability exists in SOPlanning 1.45. An attacker can exploit this vulnerability to execute arbitrary javascript via Name or Comment in status.php...
SOPlanning Cross-Site Scripting Vulnerability (CNVD-2020-13153)
SOPlanning is an online planning tool for efficiently organizing projects and tasks. A cross-site scripting vulnerability exists in SOPlanning 1.45. The vulnerability can be exploited to execute javascript code via the "Your SoPlanning url" field...
CVE-2020-9339
SOPlanning 1.45 allows XSS via the Name or Comment to status.php...
CVE-2020-9339
SOPlanning 1.45 allows XSS via the Name or Comment to status.php...