27 matches found
CVE-2019-13027
Realization Concerto Critical Chain Planner aka CCPM 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter...
Akiee Cross-Site Scripting Vulnerability
Akiee is a cross-platform Markdown-based task manager. A cross-site scripting vulnerability exists in the 'details' of tasks in Akiee version 0.0.3. A remote attacker can exploit this vulnerability to execute arbitrary code by tricking a user into opening a specially crafted liveflow.md file...
CVE-2018-1000543
Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a...
CVE-2016-5943
IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified vectors...
CVE-2016-5943
IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified vectors...
