CVE-2014-8675

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash...

CVE-2014-8676

Directory traversal vulnerability in the filegetcontents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence of arbitrary files via a .. dot dot in a URL path parameter...

CVE-2014-8677

SO Planning (SOPlanning) 1.32 and earlier is vulnerable to multiple issues, including SQL injection, XSS and PHP code injection. Specifically, CVE-2014-8677 describes that remote authenticated users with a prepared database or the ability to create arbitrary databases, or PHP < 5.2 with an con...

CVE-2014-8675

CVE-2014-8675 affects Soplanning 1.32 and earlier. The issue arises from static ICAL calendar sharing links that embed login information, enabling an attacker to brute-force the embedded password hash and obtain a calendar owner’s password. Connected sources corroborate that SOPlanning

CVE-2014-8676

SOPlanning 1.32 and earlier is affected by a Directory Traversal (CVE-2014-8676) in the file_get_contents call, enabling remote attackers to determine the existence of arbitrary files via a .. in the URL path parameter. Connected sources specify vulnerable version scope (1.32 and earlier) and des...

PT-2017-6255

Name of the Vulnerable Software and Affected Versions SOPlanning versions 1.32 and earlier Description The issue allows remote authenticated users to execute arbitrary PHP code via a crafted database name, given certain conditions such as access to an existing database, permissions to create...

PT-2017-6254

Name of the Vulnerable Software and Affected Versions SOPlanning versions 1.32 and earlier Description A directory traversal issue exists in the file get contents function, allowing remote attackers to determine the existence of arbitrary files by using a .. dot dot in a URL path parameter...

CVE-2014-8676: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the filegetcontents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence of arbitrary files via a .. dot dot in a URL path parameter...

CVE-2014-8677: Improper Control of Generation of Code

The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2 is being used, the configuration database is down, and...

CVE-2014-8675: Exposure of Sensitive Information to an Unauthorized Actor

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash...

PT-2017-6253

Name of the Vulnerable Software and Affected Versions Soplanning versions 1.32 and earlier Description The issue allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash. This is because Soplanning generates static links for sharing ICAL...

SO Planning 1.32 - Multiple Vulnerabilities

Exploit for php platform in category web applications SOPlanning - Simple Online Planning Tool multiple vulnerabilities CVEs: CVE-2014-8673, CVE-2014-8674, CVE-2014-8675, CVE-2014-8676, CVE-2014-8677 Vendor: http://www.soplanning.org/ Product: SOPlanning - Simple Online Planning Version affected:...

SO Planning 1.32 - Multiple Vulnerabilities

SO Planning 1.32 - Multiple Vulnerabilities SOPlanning - Simple Online Planning Tool multiple vulnerabilities CVEs: CVE-2014-8673, CVE-2014-8674, CVE-2014-8675, CVE-2014-8676, CVE-2014-8677 Vendor: http://www.soplanning.org/ Product: SOPlanning - Simple Online Planning Version affected: 1.32 and...

SO Planning 1.32 - Multiple Vulnerabilities

SOPlanning - Simple Online Planning Tool multiple vulnerabilities CVEs: CVE-2014-8673, CVE-2014-8674, CVE-2014-8675, CVE-2014-8676, CVE-2014-8677 Vendor: http://www.soplanning.org/ Product: SOPlanning - Simple Online Planning Version affected: 1.32 and prior Product description: SO Planning is an...