CVE-2024-48534

A reflected cross-site scripting XSS vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2024-48530

The CVE-2024-48530 vulnerability affects eSoft Planner, specifically the Instructor Appointment Availability module in version 3.24.08271-USA. A crafted POST request can cause a Denial of Service (DoS). The Red Hat/NVD/CNNVD/CVE lists corroborate this issue, but the connected documents do not pro...

CVE-2024-48533

A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSoft Planner 3.24.08271-USA allows attackers to enumerate valid user e-mail accounts...

eSoft Planner 安全漏洞

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA that stems from vulnerability to a cross-site scripting attack, which allows an attacker to execute arbitrary code in the context ...

eSoft Planner 安全漏洞

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA that stems from vulnerability to a cross-site scripting attack, which allows an attacker to execute arbitrary code in the context ...

eSoft Planner 安全漏洞

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA that originates from an attacker being able to trigger a denial of service via a crafted POST request...

CVE-2024-48536

Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a crafted web request...

eSoft Planner 安全漏洞

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA, which stems from susceptibility to a cross-site scripting attack that could allow an attacker to execute arbitrary web script or...

eSoft Planner 安全漏洞

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA, which stems from improper access control and allows an attacker to view all transactions performed by the company by serving a...

CVE-2024-48534

A reflected cross-site scripting XSS vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2024-48533

A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSoft Planner 3.24.08271-USA allows attackers to enumerate valid user e-mail accounts...

CVE-2024-48534

The CVE-2024-48534 entry corresponds to a reflected cross-site scripting (XSS) vulnerability in the Camp Details module of eSoft Planner 3.24.08271-USA. Across sources (NVD, Red Hat, CNNVD, CVE records, PT- security, and enrichment feeds), the issue is described as an attacker injecting a crafted...

eSoft Planner 安全漏洞

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA that stems from a discrepancy in the response of valid and invalid email accounts, which could allow an attacker to enumerate vali...

PT-2024-33133 · Unknown · Esoft Planner

Name of the Vulnerable Software and Affected Versions: eSoft Planner version 3.24.08271-USA Description: A discrepancy in responses for valid and invalid e-mail accounts in the Forgot your Login? module allows attackers to enumerate valid user e-mail accounts. Recommendations: For eSoft Planner...

CVE-2024-48533

CVE-2024-48533 affects eSoft Planner 3.24.08271-USA, where the Forgot your Login? module returns different responses for valid vs invalid email addresses, enabling username enumeration. Multiple sources (NVD, Red Hat, CNNVD, CVE lists) confirm the issue and its impact on account discovery. The co...

PT-2024-33132 · Unknown · Esoft Planner

Name of the Vulnerable Software and Affected Versions: eSoft Planner version 3.24.08271-USA Description: A reflected cross-site scripting XSS issue in the Rental Availability module allows attackers to execute arbitrary code in the context of a user's browser by injecting a crafted payload. This...

CVE-2024-48536

Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a crafted web request...

CVE-2024-48536

CVE-2024-48536 concerns an improper access control in the scheduling software eSoft Planner (v3.24.08271-USA). The vulnerability allows an attacker to view all company transactions by sending a crafted web request, as described across multiple sources (NVD/Red Hat/CNNVD/CVE lists). The underlying...

CVE-2024-48535

CVE-2024-48535 describes a stored XSS vulnerability in eSoft Planner 3.24.08271-USA where an attacker can inject arbitrary web scripts/HTML via the Name parameter. Multiple sources (NVD, Red Hat, CNNVD, CVE listing, and related enrichments) confirm the same issue, classed as a stored XSS. The ava...

CVE-2024-48535

A stored cross-site scripting XSS vulnerability in eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...