Harvest: Record payment for any invoice by PM (Access control Issue)

Hi Team, Description : Project ManagerFull access With Access to limited projects also have limited access to Invoices. So Project manager is assigned to limited project by Admin and he have access to limited Invoices related to assigned project. But Project manager can Actually Record payment of...

WordPress SP Project & Document Manager 2.5.3 SQL Injection

SQL Injection vulnerability in WordPress SP Project & Document Manager plugin pid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

CMS Made Simple 1.11.9 - Multiple Vulnerabilities

Vulnerabilities in CMS Made Simple, version 1.11.9 Discovered by Pedro Ribeiro [email protected] of Agile Information Security Reported to [email protected] and [email protected] Disclosure: 28/02/2014 / Last updated: 12/10/2014 CMS Made Simple, an open source content management...

traq 2.3.5 - Multiple Vulnerabilities

No description provided by source. ==================================================================== Vulnerable Software: traq-2.3.5 Official Site: TraqProject.org ==================================================================== About Software: Traq is a PHP powered project manager, capabl...

Traq Detection

The remote web server hosts Traq, a PHP-powered project manager used for tracking issues for multiple projects and milestones. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62891; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2010-5223

Multiple untrusted search path vulnerabilities in Phoenix Project Manager 2.1.0.8 allow local users to gain privileges via a Trojan horse 1 wbtrv32.dll or 2 w3btrv7.dll file in the current working directory, as demonstrated by a directory that contains a .ppx file. NOTE: some of these details are...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Phoenix Project Manager 2.1.0.8 allow local users to gain privileges via a Trojan horse 1 wbtrv32.dll or 2 w3btrv7.dll file in the current working directory, as demonstrated by a directory that contains a .ppx file. NOTE: some of these details are...

CVE-2010-5223

Phoenix Project Manager 2.1.0.8 is affected by multiple untrusted search path vulnerabilities that allow local privilege escalation when a user places one of the DLLs (wbtrv32.dll or w3btrv7.dll) in the current working directory and opens a .ppx file. The issue relies on DLL search order in the p...

CVE-2010-5223

Multiple untrusted search path vulnerabilities in Phoenix Project Manager 2.1.0.8 allow local users to gain privileges via a Trojan horse 1 wbtrv32.dll or 2 w3btrv7.dll file in the current working directory, as demonstrated by a directory that contains a .ppx file. NOTE: some of these details are...

traq-2.3.5_CSRF_XSS_SQL_INjeCTION_vulns

==================================================================== Vulnerable Software: traq-2.3.5 Official Site: TraqProject.org ==================================================================== About Software: Traq is a PHP powered project manager, capable of tracking issues for multiple...

Webify Product Series - Multiple Web Vulnerabilities

Title: ====== Webify Product Series - Multiple Web Vulnerabilities Date: ===== 2012-06-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=598 VL-ID: ===== 598 Common Vulnerability Scoring System: ==================================== 6.5 Introduction: ============= Webif...

Traq 2.3.5 CSRF / XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================================== Vulnerable Software: traq-2.3.5 Official Site: TraqProject.org ==================================================================== About Software: Traq is a PHP powered...

traq 2.3.5 - Multiple Vulnerabilities

==================================================================== Vulnerable Software: traq-2.3.5 Official Site: TraqProject.org ==================================================================== About Software: Traq is a PHP powered project manager, capable of tracking issues for multiple...

Traq 2.3.5 CSRF / XSS / SQL Injection

==================================================================== Vulnerable Software: traq-2.3.5 Official Site: TraqProject.org ==================================================================== About Software: Traq is a PHP powered project manager, capable of tracking issues for multiple...

Webify Product Series Local File Inclusion / Cross Site Scripting

Title: ====== Webify Product Series - Multiple Web Vulnerabilities Date: ===== 2012-06-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=598 VL-ID: ===== 598 Common Vulnerability Scoring System: ==================================== 6.5 Introduction: ============= Webif...

Webify Product Series - Multiple Web Vulnerabilities

Document Title: =============== Webify Product Series - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=598 Release Date: ============= 2012-06-09 Vulnerability Laboratory ID VL-ID: ==================================== 598...

Webify Product Series - Multiple Web Vulnerabilities

Document Title: =============== Webify Product Series - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=598 Release Date: ============= 2012-06-09 Vulnerability Laboratory ID VL-ID: ==================================== 598...

Phoenix Project Manager 2.1.0.8 - DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44198/info Phoenix Project Manager is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location...

Phoenix Project Manager 2.1.0.8 - DLL Loading Arbitrary Code Execution

Phoenix Project Manager 2.1.0.8 - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44198/info Phoenix Project Manager is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use th...