PT-2020-20561

Name of the Vulnerable Software and Affected Versions SOPlanning version 1.45 Description The issue allows for a CSRF attack, enabling arbitrary user creation via the "process/xajax server.php" API endpoint. Recommendations For SOPlanning version 1.45, consider restricting access to the...

PT-2020-20560

Name of the Vulnerable Software and Affected Versions SOPlanning version 1.45 Description The issue allows for a CSRF attack, enabling arbitrary changes to the admin password through the "process/xajax server.php" endpoint. Recommendations For SOPlanning version 1.45, consider restricting access ...