Cross site scripting

Rukovoditel Project Management app 2.6 is affected by: Cross Site Scripting XSS. An attacker can add JavaScript code to the filename...

CVE-2020-21732

Rukovoditel Project Management app 2.6 is affected by: Cross Site Scripting XSS. An attacker can add JavaScript code to the filename...

CVE-2020-21732

Summary (CVE-2020-21732): Rukovoditel Project Management app version 2.6 is vulnerable to Cross Site Scripting (XSS) via filename handling. An attacker can inject JavaScript code by manipulating filenames, potentially compromising user sessions or rendering contexts. Impact details: XSS is the ex...

PT-2020-15385

Name of the Vulnerable Software and Affected Versions Rukovoditel Project Management app version 2.6 Description The issue allows an attacker to add JavaScript code to the filename, potentially leading to Cross Site Scripting XSS attacks. Recommendations For version 2.6, update to a newer version...

There are SQL injection vulnerabilities in the backend of Zendo open source version of Qingdao Yiqi Tianchuang Management Consulting Co.

Zendo Open Source Edition is a research and development project management software. There is a SQL injection vulnerability in the backend of Zendo Open Source Edition of Qingdao Yiqi Tianchuang Management Consulting Co. An attacker can exploit this vulnerability to obtain sensitive information...

Get Lifetime Access to 1000+ Premium Online Training Courses for Just $59

"In today's knowledge economy, continual learning is an imperative." — Those words from Aytekin Tank, the founder of JotForm, are particularly important for anyone working in IT or development. With over 1,000 premium courses complete list from top instructors, StackSkills Unlimited provides...

The vulnerability of the Mobile App application component for automating project management processes in Oracle Primavera Unifier allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Mobile App application for automating project management processes in Oracle Primavera Unifier is related to lack of access control. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information using t...

Qingdao Yiqi Tianchuang Management Consulting Co., Ltd. Zendo open source version of the existence of arbitrary file read vulnerability

Zendo Open Source Edition is a research and development project management software. Qingdao Yiqi Tianchuang Management Consulting Co., Ltd Zendo Open Source Edition There is an arbitrary file read vulnerability, which can be exploited by attackers to obtain sensitive information...

Create-Project Manager 1.07 Cross Site Scripting / HTML Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Create-Project Manager 1.07 Multi XSS /HTML injection Vunlerabilities Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/create-project-manager-with-authenticator/20483329?srank=3 Version: 1.6 Tested on:...

Create-Project Manager 1.07 Cross Site Scripting / HTML Injection

Exploit Title: Create-Project Manager 1.07 Multi XSS /HTML injection Vunlerabilities Google Dork:N/A Date: 2020-05-06 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/create-project-manager-with-authenticator/20483329?srank=3 Version: 1.6 Tested on: 5.4.0-kali4-amd64...

Rukovoditel Input Validation Error Vulnerability

Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management , customer relationship management and other functions . An input validation error vulnerability exists in Rukovoditel version 2.5.2. An attacker can exploit th...

IBM Tivoli Netcool Impact Denial of Service Vulnerability

IBM Tivoli Netcool Impact is a suite of network management software from IBM in the United States. The software has the ability to automate business-critical functions and provide a platform that provides unified access to real-time data, events and indicators. A security vulnerability exists in...

CVE-2020-4236

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an authenticated user to cause a denial of service due to improper content parsing in the project management module. IBM X-Force ID: 175409...

CVE-2020-4236

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an authenticated user to cause a denial of service due to improper content parsing in the project management module. IBM X-Force ID: 175409...

Security Bulletin: Denial of service vulnerability in IBM Tivoli Netcool Impact (CVE-2020-4236)

Summary There is a denial of service vulnerability in IBM Tivoli Netcool Impact. Vulnerability Details CVEID: CVE-2020-4236 DESCRIPTION: IBM Tivoli Netcool Impact could allow an authenticated user to cause a denial of service due to improper content parsing in the project management module. CVSS...

SQL Injection Vulnerability in Zendo Enterprise Edition

Zendo Enterprise Edition is open source project management software. Zendo Enterprise Edition suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Debian: Security Advisory (DLA-2125-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL injection vulnerability in Zendo Project Management Software co***.php file

Zendo Project Management Software is homegrown open source project management software. Zendo Project Management Software co.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2020-7246

A remote code execution RCE vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code file via the profile photo functionality, by leveraging a path traversal vulnerability in the users'photoppreview' delete photo feature, allowing bypass of .htaccess protection...

Rukovoditel Project Management CRM 2.5.2 - entities_id SQL Injection

Rukovoditel Project Management CRM 2.5.2 - entitiesid SQL Injection Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'entitiesid' SQL Injection Google Dork: N/A Date: 2020-01-15 Blog: https://fatihhcelik.blogspot.com/ Exploit Author: Fatih Çelik Vendor Homepage:...