314 matches found
PT-2020-20561
Name of the Vulnerable Software and Affected Versions SOPlanning version 1.45 Description The issue allows for a CSRF attack, enabling arbitrary user creation via the "process/xajax server.php" API endpoint. Recommendations For SOPlanning version 1.45, consider restricting access to the...
CVE-2020-9266: Cross-Site Request Forgery (CSRF)
SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xajaxserver.php...
CVE-2020-9267: Cross-Site Request Forgery (CSRF)
SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajaxserver.php...
CVE-2020-9269: Improper Neutralization of Special Elements used in an SQL Command
SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by exportical.php...
PT-2020-20563
Name of the Vulnerable Software and Affected Versions SOPlanning version 1.45 Description The issue allows for authenticated SQL Injection, which can lead to command execution. This is achievable via the users parameter, as demonstrated in the export ical.php file. Recommendations For SOPlanning...
CVE-2020-9268: Improper Neutralization of Special Elements used in an SQL Command
SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nomcreateur&by= substring...
PT-2020-20560
Name of the Vulnerable Software and Affected Versions SOPlanning version 1.45 Description The issue allows for a CSRF attack, enabling arbitrary changes to the admin password through the "process/xajax server.php" endpoint. Recommendations For SOPlanning version 1.45, consider restricting access ...
PT-2020-20562
Name of the Vulnerable Software and Affected Versions SoPlanning version 1.45 Description The issue concerns SQL Injection in the OrderBy clause. This is demonstrated through the projets.php endpoint with specific parameters, such as order=nom createur and by=substring. Recommendations For...
SOPlanning 1.45 - users SQL Injection
SOPlanning 1.45 - users SQL Injection Exploit Title: SOPlanning 1.45 - 'users' SQL Injection Date: 2020-02-14 Exploit Author: J3rryBl4nks, Homebrewer Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on...
SOPlanning 1.45 - (by) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: SOPlanning 1.45 - 'by' SQL Injection Exploit Author: J3rryBl4nks Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on Windows 10/Kali...
SOPlanning 1.45 - Cross-Site Request Forgery (Add User)
Exploit Title: SOPlanning 1.45 - Cross-Site Request Forgery Add User Date: 2020-02-14 Exploit Author: J3rryBl4nks Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on Windows 10/Kali Rolling The...
SOPlanning 1.45 - 'by' SQL Injection
Exploit Title: SOPlanning 1.45 - 'by' SQL Injection Date: 2020-02-14 Exploit Author: J3rryBl4nks Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on Windows 10/Kali Rolling The SOPlanning application i...
SOPlanning 1.45 - 'users' SQL Injection
Exploit Title: SOPlanning 1.45 - 'users' SQL Injection Date: 2020-02-14 Exploit Author: J3rryBl4nks, Homebrewer Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on Windows 10/Kali Rolling The SOPlannin...
SOPlanning 1.45 - by SQL Injection
SOPlanning 1.45 - by SQL Injection Exploit Title: SOPlanning 1.45 - 'by' SQL Injection Date: 2020-02-14 Exploit Author: J3rryBl4nks Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on Windows 10/Kali...
SOPlanning 1.45 - Cross-Site Request Forgery (Add User) Vulnerability
Exploit for php platform in category web applications Exploit Title: SOPlanning 1.45 - Cross-Site Request Forgery Add User Exploit Author: J3rryBl4nks Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested o...
SOPlanning 1.45 - Cross-Site Request Forgery (Add User)
SOPlanning 1.45 - Cross-Site Request Forgery Add User Exploit Title: SOPlanning 1.45 - Cross-Site Request Forgery Add User Date: 2020-02-14 Exploit Author: J3rryBl4nks Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/...
SOPlanning 1.45 - (users) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: SOPlanning 1.45 - 'users' SQL Injection Exploit Author: J3rryBl4nks, Homebrewer Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on...
SOPlanning 1.45 SQL Injection
Exploit Title: SOPlanning 1.45 - 'users' SQL Injection Date: 2020-02-14 Exploit Author: J3rryBl4nks, Homebrewer Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on Windows 10/Kali Rolling The SOPlannin...
SOPlanning 1.45 Cross Site Request Forgery
Exploit Title: SOPlanning 1.45 - Cross-Site Request Forgery Add User Date: 2020-02-14 Exploit Author: J3rryBl4nks Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/files/soplanning/ Version 1.45 Tested on Windows 10/Kali Rolling The...
