626 matches found
CVE-2019-13027
Realization Concerto Critical Chain Planner (CCPM) 5.10.8071 has an SQL Injection in the taskupdt/taskdetails.aspx page via the projectname parameter. Root cause cited: lack of input validation leading to unsanitized SQL statements. Impact described as the ability to execute arbitrary SQL command...
CVE-2019-13027
Realization Concerto Critical Chain Planner aka CCPM 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter...
Announcing the Microsoft Graph Security Hackathon winners
Bringing together information from multiple disconnected security systems to solve today’s security challenges is complex. We recently asked Microsoft Graph Security Hackathon participants to come up with innovative solutions using the Microsoft Graph Security API, and they did not disappoint. We...
Security Planner
Security Planner is a custom security advice tool from Citizen Lab. Answer a few questions, and it gives you a few simple things you can do to improve your security. It's not meant to be comprehensive, but instead to give people things they can actually do to immediately improve their security. I...
belgianrail.be XSS vulnerability
Vulnerable URL: http://www.belgianrail.be/jp/sncb-nmbs-routeplanner/traininfo.exe/en/208221/71700/16702/61057/80?ld=std=%27-confirmopenbugbounty-%27=10/10/2017evaId=8814001type=dep=8814001=dep=08:43=50===Sa,%2013/10/12=1:0111111==sq& Details: Description| Value ---|--- Patched:| No Latest check f...
Calendar Planner Component SQL Injection Vulnerability in Joomla!
Joomla! is an open source, cross-platform content management system developed using PHP and MySQL.Calendar Planner is a complete, easy-to-use calendar tool. A SQL injection vulnerability exists in the Joomla! Calendar Planner component, which can be exploited by an attacker to obtain sensitive...
Calendar Planner 1.0.1 - SQL Injection
Calendar Planner 1.0.1 - SQL Injection resolution: update to 1.0.2 update notice: http://www.joomlathat.com/news/news/calendar-planner/calendar-planner-1-0-2-security-release...
Joomla Calendar Planner 1.0.1 SQL Injection
Exploit Title: Joomla! Component Calendar Planner 1.0.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: http://joomlathat.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/calendar-planner/ Demo: http://demo.joomlathat.com/ Version: 1.0.1...
Joomla Calendar Planner 1.0.1 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component Calendar Planner 1.0.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: http://joomlathat.com/ Software Link:...
Joomla! Component Calendar Planner 1.0.1 - SQL Injection
Joomla! Component Calendar Planner 1.0.1 - SQL Injection Exploit Title: Joomla! Component Calendar Planner 1.0.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: http://joomlathat.com/ Software Link:...
Joomla! Component Calendar Planner 1.0.1 - SQL Injection
Exploit Title: Joomla! Component Calendar Planner 1.0.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: http://joomlathat.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/calendar-planner/ Demo: http://demo.joomlathat.com/ Version: 1.0.1...
Mobills: Budget Planner - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Mobills: Budget Planner published at the 'play' market has multiple vulnerabilities...
dublincoach.ie XSS vulnerability
Vulnerable URL: http://www.dublincoach.ie/services/dublin-coach-journey-planner.php?servicesto=42=Rose+Hotel'"--!confirmOPENBUGBOUNTY...
Weak Password Vulnerability in Free Planning Enterprise Website Management System
Free Planner Enterprise Website Management System is an ASP-based website builder. Freedom of planning enterprise website management system default weak password vulnerability, attackers exploit the vulnerability through the default weak password admin/admin login website background, get backgrou...
TYPO3 GN Tactics Planner Extension SQL Injection Vulnerability
TYPO3 is a free and open source content management system. A SQL injection vulnerability exists in TYPO3 GN Tactics Planner Extension due to the program failing to adequately clean up user input. An attacker could exploit the vulnerability to access or modify data...
PHP Planner 0.4 SQL Injection
PHP Planner SQL Injection Vulnerability , Discovered by NA , NAattutanota.com ================================================================================= Description =========== This is a basic PHP Calendar with lots of features and possiblities. Uses mySQL as backend and is fitted with an...
Debian DLA-491-1 : postgresql-9.1 bugfix update
The PostgreSQL project released a new version of the PostgreSQL 9.1 branch : - Clear the OpenSSL error queue before OpenSSL calls, rather than assuming it's clear already; and make sure we leave it clear afterwards Peter Geoghegan, Dave Vitek, Peter Eisentraut This change prevents problems when...
Weekly Planner - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Weekly Planner published at the 'play' market has multiple vulnerabilities...
[SECURITY] [DLA 491-1] postgresql-9.1 bugfix update
Package : postgresql-9.1 Version : 9.1.22-0+deb7u1 The PostgreSQL project released a new version of the PostgreSQL 9.1 branch: Clear the OpenSSL error queue before OpenSSL calls, rather than assuming its clear already; and make sure we leave it clear afterwards Peter Geoghegan, Dave Vitek, Peter...
