9 matches found
CVE-2014-8673
Multiple SQL vulnerabilities exist in planning.php, userlist.php, projets.php, usergroupes.php, and groupelist.php in Simple Online Planning SOPPlanningbefore 1.33...
Sql injection
Multiple SQL vulnerabilities exist in planning.php, userlist.php, projets.php, usergroupes.php, and groupelist.php in Simple Online Planning SOPPlanningbefore 1.33...
CVE-2014-8673
Multiple SQL vulnerabilities exist in planning.php, userlist.php, projets.php, usergroupes.php, and groupelist.php in Simple Online Planning SOPPlanningbefore 1.33...
CVE-2014-8673
SOPPlanning (Simple Online Planning) is affected by CVE-2014-8673 before v1.33. Multiple SQL injection vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php due to insufficient input sanitization and unsafe SQL construction. Red‑team/Exploit refe...
CVE-2014-8673: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL vulnerabilities exist in planning.php, userlist.php, projets.php, usergroupes.php, and groupelist.php in Simple Online Planning SOPPlanningbefore 1.33...
PT-2020-7754
Name of the Vulnerable Software and Affected Versions SOPPlanning versions prior to 1.33 Description Multiple SQL vulnerabilities exist in various PHP files, including planning.php, user list.php, projets.php, user groupes.php, and groupe list.php. Recommendations For versions prior to 1.33, upda...
Ovidentia absences Module 2.64 - Remote File Inclusion Vulnerability
Exploit for php platform in category web applications Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Tested on: Ubuntu-Linux Download:...
PT-2014-2948
Name of the Vulnerable Software and Affected Versions SimpleRisk versions prior to 20130916-001 Description A cross-site request forgery issue exists, allowing remote attackers to hijack user authentication for requests that add projects via an add project action in the management/prioritize...
PT-2014-2949
Name of the Vulnerable Software and Affected Versions SimpleRisk versions prior to 20130916-001 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the new project parameter in the management/prioritize planning.php file. Recommendations...