CVE-2014-8675

CVE-2014-8675 affects Soplanning 1.32 and earlier. The issue arises from static ICAL calendar sharing links that embed login information, enabling an attacker to brute-force the embedded password hash and obtain a calendar owner’s password. Connected sources corroborate that SOPlanning

CVE-2014-8676

Directory traversal vulnerability in the filegetcontents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence of arbitrary files via a .. dot dot in a URL path parameter...

CVE-2014-8677

The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2 is being used, the configuration database is down, and...

CVE-2014-8676

SOPlanning 1.32 and earlier is affected by a Directory Traversal (CVE-2014-8676) in the file_get_contents call, enabling remote attackers to determine the existence of arbitrary files via a .. in the URL path parameter. Connected sources specify vulnerable version scope (1.32 and earlier) and des...

CVE-2014-8675

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash...

SO Planning 1.32 - Multiple Vulnerabilities

SO Planning 1.32 - Multiple Vulnerabilities SOPlanning - Simple Online Planning Tool multiple vulnerabilities CVEs: CVE-2014-8673, CVE-2014-8674, CVE-2014-8675, CVE-2014-8676, CVE-2014-8677 Vendor: http://www.soplanning.org/ Product: SOPlanning - Simple Online Planning Version affected: 1.32 and...

SO Planning 1.32 - Multiple Vulnerabilities

Exploit for php platform in category web applications SOPlanning - Simple Online Planning Tool multiple vulnerabilities CVEs: CVE-2014-8673, CVE-2014-8674, CVE-2014-8675, CVE-2014-8676, CVE-2014-8677 Vendor: http://www.soplanning.org/ Product: SOPlanning - Simple Online Planning Version affected:...

SO Planning 1.32 - Multiple Vulnerabilities

SOPlanning - Simple Online Planning Tool multiple vulnerabilities CVEs: CVE-2014-8673, CVE-2014-8674, CVE-2014-8675, CVE-2014-8676, CVE-2014-8677 Vendor: http://www.soplanning.org/ Product: SOPlanning - Simple Online Planning Version affected: 1.32 and prior Product description: SO Planning is an...