Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that 1 change the password, 2 add users, or 3 delete users via unknown vectors...

CVE-2009-1733

Cross-site request forgery CSRF vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that 1 change the password, 2 add users, or 3 delete users via unknown vectors...

CVE-2009-1732

Cross-site scripting XSS vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitrary web script or HTML via the grp parameter...

CVE-2009-1732

CVE-2009-1732 is a cross-site scripting (XSS) vulnerability affecting ipplan in the admin/usermanager module, caused by insufficient sanitising of the grp parameter. Remote attackers could inject arbitrary HTML/JavaScript to execute in a user’s browser. Public disclosures tie this to IPplan 4.91a...

CVE-2009-1733

Cross-site request forgery CSRF vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that 1 change the password, 2 add users, or 3 delete users via unknown vectors...

CVE-2009-1732

Cross-site scripting XSS vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitrary web script or HTML via the grp parameter...

CVE-2009-1733

CVE-2009-1733 describes a CSRF vulnerability in IPplan 4.91a that can allow an attacker to hijack administrator authentication to perform actions such as changing passwords and adding or deleting users, via unknown vectors. The affected software is IPplan (web admin interface), with the underlyin...

[SA12960] IPplan Unspecified SQL Injection Vulnerabilities

TITLE: IPplan Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA12960 VERIFY ADVISORY: http://secunia.com/advisories/12960/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From local network SOFTWARE: IPplan 3.x http://secunia.com/product/4131/ DESCRIPTION: Some...