eSoft Planner security vulnerabilities

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA that originates from an attacker being able to trigger a denial of service via a crafted POST request...

eSoft Planner security vulnerabilities

eSoft Planner is a scheduling software for managing sports facilities from eSoft Planner, Inc. A security vulnerability exists in eSoft Planner version 3.24.08271-USA that stems from vulnerability to a cross-site scripting attack, which allows an attacker to execute arbitrary code in the context ...

PT-2024-33133

Name of the Vulnerable Software and Affected Versions eSoft Planner version 3.24.08271-USA Description A discrepancy in responses for valid and invalid e-mail accounts in the Forgot your Login? module allows attackers to enumerate valid user e-mail accounts. Recommendations For eSoft Planner...

PT-2024-33131

Name of the Vulnerable Software and Affected Versions eSoft Planner version 3.24.08271-USA Description An issue in the Instructor Appointment Availability module allows attackers to cause a Denial of Service DoS via a crafted POST request. Recommendations For version 3.24.08271-USA, consider...

CVE-2024-48530: Allocation of Resources Without Limits or Throttling

An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-48533

A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSoft Planner 3.24.08271-USA allows attackers to enumerate valid user e-mail accounts...

CVE-2024-48536

Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a crafted web request...

CVE-2024-48535

A stored cross-site scripting XSS vulnerability in eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

CVE-2024-48534

A reflected cross-site scripting (XSS) vulnerability exists in the Camp Details module of eSoft Planner version 3.24.08271-USA . The root cause is the improper neutralization of input during web page generation, which allows an attacker to inject a crafted payload to execute arbitrary code in the...

CVE-2024-48535

A stored cross-site scripting (XSS) vulnerability exists in eSoft Planner version 3.24.08271-USA , a scheduling software for managing sports facilities. The flaw stems from the improper neutralization of input during web page generation , specifically allowing an attacker to inject a crafted payl...

CVE-2024-48530

The eSoft Planner scheduling software (version 3.24.08271-USA ) is vulnerable to a Denial of Service (DoS) attack. The flaw exists within the Instructor Appointment Availability module , where an attacker can trigger the DoS by sending a crafted POST request . This issue is associated with CWE-77...

PT-2024-33135

Name of the Vulnerable Software and Affected Versions eSoft Planner version 3.24.08271-USA Description A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Name parameter. This enables the execution of malicious...

CVE-2024-48531: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability on the Rental Availability module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2024-48533: Incorrect Default Permissions

A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSoft Planner 3.24.08271-USA allows attackers to enumerate valid user e-mail accounts...

CVE-2024-48534: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2024-48535: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

CVE-2024-48536: Improper Neutralization of Input During Web Page Generation

Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a crafted web request...

CVE-2024-48534

A reflected cross-site scripting XSS vulnerability on the Camp Details module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...

CVE-2024-48530

An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-48531

A reflected cross-site scripting XSS vulnerability on the Rental Availability module of eSoft Planner 3.24.08271-USA allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...