352 matches found
CVE-2017-15206
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user...
CVE-2017-15197
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another user...
CVE-2017-15207
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user...
CVE-2017-15202
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user...
CVE-2017-15196
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another user...
Code injection
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of another user...
Design/Logic Flaw
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user...
Code injection
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user...
Design/Logic Flaw
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user...
Design/Logic Flaw
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user...
Code injection
In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user...
Design/Logic Flaw
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user...
Design/Logic Flaw
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user...
Design/Logic Flaw
In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private project of another user...
Design/Logic Flaw
In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of another user, as demonstrated by Name, Email, Identifier, and Description...
Design/Logic Flaw
In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of another user...
Code injection
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of another user...
CVE-2017-15212
CVE-2017-15212 affects Kanboard prior to 1.0.47. An authenticated user can modify form data to view the names of tags for private projects belonging to other users, indicating insufficient access control on private project metadata. The root cause is a vulnerability in how form data is processed,...
