Lucene search
K

8 matches found

OSV
OSV
added 2024/11/20 9:15 p.m.1 views

CVE-2024-48531

A reflected cross-site scripting XSS vulnerability on the Rental Availability module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

5.4CVSS6AI score
Exploits0References1
OSV
OSV
added 2024/11/20 9:15 p.m.2 views

CVE-2024-48530

An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service DoS via a crafted POST request...

7.5CVSS5.8AI score0.00268EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/11/20 12:0 a.m.2 views

eSoft Planner 安全漏洞

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA, which stems from susceptibility to a cross-site scripting attack that could allow an attacker to execute arbitrary web script or...

5.4CVSS5.9AI score0.00169EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.2 views

PT-2024-33133 · Unknown · Esoft Planner

Name of the Vulnerable Software and Affected Versions: eSoft Planner version 3.24.08271-USA Description: A discrepancy in responses for valid and invalid e-mail accounts in the Forgot your Login? module allows attackers to enumerate valid user e-mail accounts. Recommendations: For eSoft Planner...

5.3CVSS7.2AI score0.00143EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/11/20 12:0 a.m.1 views

eSoft Planner 安全漏洞

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA that stems from a discrepancy in the response of valid and invalid email accounts, which could allow an attacker to enumerate vali...

5.3CVSS6.6AI score0.00143EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/11/20 12:0 a.m.3 views

eSoft Planner 安全漏洞

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA, which stems from improper access control and allows an attacker to view all transactions performed by the company by serving a...

7.5CVSS6.6AI score0.0018EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.3 views

PT-2024-33131 · Unknown · Esoft Planner

Name of the Vulnerable Software and Affected Versions: eSoft Planner version 3.24.08271-USA Description: An issue in the Instructor Appointment Availability module allows attackers to cause a Denial of Service DoS via a crafted POST request. Recommendations: For version 3.24.08271-USA, consider...

7.5CVSS7AI score0.00268EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/11/20 12:0 a.m.2 views

eSoft Planner 安全漏洞

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA that originates from an attacker being able to trigger a denial of service via a crafted POST request...

7.5CVSS6.5AI score0.00268EPSS
Exploits1References1
Rows per page
Query Builder