290 matches found
SOPlanning 1.52.00 Cross Site Scripting Vulnerability
Exploit Title: SOPlanning v1.52.00 'groupesave.php' XSS Reflected XSS Application: SOPlanning Version: 1.52.00 Exploit Author: Joseph McPeters Liquidsky Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/ Tested on: Linux CVE: Not yet assign...
SOPlanning 1.52.00 Cross Site Scripting
Exploit Title: SOPlanning v1.52.00 'groupesave.php' XSS Reflected XSS Application: SOPlanning Version: 1.52.00 Date: 4/22/24 Exploit Author: Joseph McPeters Liquidsky Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/ Tested on: Linux CVE:...
SOPlanning 1.52.00 Cross Site Request Forgery Vulnerability
/...
Exploit for CVE-2024-33722
Exploit Title: SOPlanning v1.52.00 'groupesave.php' XSS Reflec...
PT-2024-3890
Name of the Vulnerable Software and Affected Versions: SOPlanning Simple Online Planning versions affected versions not specified Description: The issue is related to a lack of protection against SQL query structure exploitation in the projets.php script of the SOPlanning CMS system. This could...
SOPlanning Authentication Bypass Vulnerability
SOPlanning is an online planning tool for efficiently organizing projects and tasks. An authentication bypass vulnerability exists in SOPlanning 1.45 - 1.47. An attacker can exploit this vulnerability to completely bypass administrator and guest user authentication by forging a valid cookie...
CVE-2020-13963
SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp which is a guest account...
CVE-2020-13963
SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp which is a guest account...
CVE-2020-13963
SOPlanning before 1.47 contains an authentication bypass due to incorrect access control: the admin key is hardcoded in the installation code and there is no key for the guest account (publicsp). This allows bypassing administrator and guest authentication by forging a valid cookie. Vulnerable ve...
SOPlanning 信任管理问题漏洞
SOPlanning is an online planning tool for efficiently organizing projects and tasks. An authentication bypass vulnerability exists in SOPlanning 1.45 - 1.47. An attacker can exploit this vulnerability to completely bypass administrator and guest user authentication by forging a valid cookie...
CVE-2020-13963: Use of Hard-coded Credentials
SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp which is a guest account...
SOPlanning Authentication Bypass Vulnerability
SOPlanning is an online project management software. An authentication bypass vulnerability exists in versions prior to SoPlanning 1.47. The vulnerability stems from the program not properly checking the security key used to publicly share the planning solution. An attacker could use this...
CVE-2020-25867
SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication...
CVE-2020-25867
SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication...
Authentication flaw
SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication...
CVE-2020-25867
SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication...
CVE-2020-25867
SOPlanning is affected by an authentication bypass vulnerability. Versions prior to 1.47 fail to properly validate the security key used to publicly share planning solutions, allowing an attacker to bypass authentication and gain access to plannings. The issue is documented across multiple source...
CVE-2020-25867: Improper Authentication
SoPlanning before 1.47 doesn't correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication...
SOPlanning Cross-Site Scripting Vulnerability
SOPlanning is an online project management software. A cross-site scripting vulnerability exists in SOPlanning version 1.46.01. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side co...