Lucene search
+L

796 matches found

zdt
zdt
added 2020/01/16 12:00 a.m.93 views

Rukovoditel Project Management CRM 2.5.2 - (filters) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'filters' SQL Injection Blog: https://fatihhcelik.blogspot.com/ Exploit Author: Fatih Çelik Vendor Homepage: https://www.rukovoditel.net/ Software Link:...

0.4AI score
SaveExploits0
exploitpack
exploitpack
added 2020/01/16 12:00 a.m.32 views

Rukovoditel Project Management CRM 2.5.2 - reports_id SQL Injection

Rukovoditel Project Management CRM 2.5.2 - reportsid SQL Injection Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'reportsid' SQL Injection Google Dork: N/A Date: 2020-01-15 Blog: https://fatihhcelik.blogspot.com/ Exploit Author: Fatih Çelik Vendor Homepage: https://www.rukovoditel.net...

0.1AI score
SaveExploits0
zdt
zdt
added 2020/01/16 12:00 a.m.110 views

Rukovoditel Project Management CRM 2.5.2 - (reports_id) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'reportsid' SQL Injection Blog: https://fatihhcelik.blogspot.com/ Exploit Author: Fatih Çelik Vendor Homepage: https://www.rukovoditel.net/ Software Link:...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/01/16 12:00 a.m.191 views

Rukovoditel Project Management CRM 2.5.2 - 'entities_id' SQL Injection

Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'entitiesid' SQL Injection Google Dork: N/A Date: 2020-01-15 Blog: https://fatihhcelik.blogspot.com/ Exploit Author: Fatih Çelik Vendor Homepage: https://www.rukovoditel.net/ Software Link: https://sourceforge.net/projects/rukovoditel/...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/01/15 12:00 a.m.164 views

Rukovoditel Project Management CRM 2.5.2 SQL Injection

Exploit Title: Rukovoditel Project Management CRM 2.5.2 - 'reportsid' SQL Injection Google Dork: N/A Date: 2020-01-15 Blog: https://fatihhcelik.blogspot.com/ Exploit Author: Fatih Çelik Vendor Homepage: https://www.rukovoditel.net/ Software Link: https://sourceforge.net/projects/rukovoditel/...

0.2AI score
SaveExploits0
CNVD
CNVD
added 2019/12/16 12:00 a.m.9 views

SQL Injection Vulnerability in PM2 Project Management System of Beijing Bangyong Technology Co.

BONYON is committed to project management research and development, integrating project management consulting, software development, project management training and education as one of the professional foreign-funded companies. The PM2 project management system of Beijing BangYong Technology Co.,...

7.6AI score
SaveExploits0
OSV
OSV
added 2019/12/11 10:15 p.m.9 views

CVE-2019-0399

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500702, 600740, 610740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure...

6.5CVSS6.6AI score0.00882EPSS
SaveExploits0References2
NVD
NVD
added 2019/12/11 10:15 p.m.13 views

CVE-2019-0399

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500702, 600740, 610740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure...

6.5CVSS6.3AI score0.00882EPSS
SaveExploits0References2
Prion
Prion
added 2019/12/11 10:15 p.m.19 views

Information disclosure

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500702, 600740, 610740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure...

4CVSS6.3AI score0.00882EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/12/11 9:35 p.m.21 views

CVE-2019-0399

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500702, 600740, 610740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure...

6.3AI score0.00882EPSS
SaveExploits0References2
CVE
CVE
added 2019/12/11 9:35 p.m.91 views

CVE-2019-0399

CVE-2019-0399 affects SAP Portfolio and Project Management (PPM) in SAP S4CORE 1.02/1.03, and EPPM 1.00 with CPRXRPM 500_702/600_740/610_740. The issue is an information-disclosure vulnerability where a user can unintentionally access accounting information from the Projects in Project dashboard....

6.5CVSS6.3AI score0.00882EPSS
SaveExploits0References2Affected Software1
Symantec
Symantec
added 2019/12/10 12:00 a.m.32 views

SAP Portfolio and Project Management CVE-2019-0399 Information Disclosure Vulnerability

Description SAP Portfolio and Project Management is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected SAP Portfolio and Project Management SAP S4CORE 1.02 SAP S4CORE...

0.3AI score0.00882EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2019/12/09 12:00 a.m.6 views

Arbitrary File Read Vulnerability in Zendo Project Management System

Zendo is China's first open source project management software. It integrates product management , project management , quality management , document management , organization management and transaction management. Zendo project management system has an arbitrary file read vulnerability , an...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2019/12/09 12:00 a.m.8 views

Access Control Bypass Vulnerability in Zendo Project Management System

Zendo is China's first open source project management software. It integrates product management , project management , quality management , document management , organization management and transaction management. Zendo Project Management System has an arbitrary file read vulnerability that can ...

7AI score
SaveExploits0
CNVD
CNVD
added 2019/12/09 12:00 a.m.7 views

Logic flaw vulnerability in Zendo project management system

Zendo is China's first open source project management software. It integrates product management , project management , quality management , document management , organization management and transaction management. Zendo project management system has a logic flaw vulnerability , an attacker can...

7AI score
SaveExploits0
CNVD
CNVD
added 2019/09/25 12:00 a.m.7 views

SQL Injection Vulnerability in Zendo Project Management System m****l.php File

Zendo project management system developed by Qingdao Easoft Tianchuang Network Technology Co., Ltd, domestic open source project management software. It integrates product management, project management, quality management, document management, organizational management and transaction management...

8.3AI score
SaveExploits0
CNVD
CNVD
added 2019/09/25 12:00 a.m.8 views

Arbitrary File Read Vulnerability in Zendo Project Management System

Zendo project management system developed by Qingdao Easoft Tianchuang Network Technology Co., Ltd, domestic open source project management software. It integrates product management, project management, quality management, document management, organizational management and transaction management...

7AI score
SaveExploits0
OSV
OSV
added 2019/08/28 5:15 p.m.12 views

CVE-2019-15496

MyT Project Management 1.5.1 lacks CSRF protection and, for example, allows a user/create CSRF attack. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page...

8.8CVSS6AI score0.00614EPSS
SaveExploits1References1
NVD
NVD
added 2019/08/28 5:15 p.m.20 views

CVE-2019-15496

MyT Project Management 1.5.1 lacks CSRF protection and, for example, allows a user/create CSRF attack. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page...

8.8CVSS8.6AI score0.00614EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/08/28 4:34 p.m.31 views

CVE-2019-15496

MyT Project Management 1.5.1 lacks CSRF protection and, for example, allows a user/create CSRF attack. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page...

8.6AI score0.00614EPSS
SaveExploits1References1
Rows per page
Query Builder