SOPlanning SQL注入漏洞

SOPlanning is a set of online project management software developed by SOPlanning Company. Version 1.52.00 of SOPlanning contains an SQL injection vulnerability. This vulnerability stems from the SQL injection in the projects.php file, and it could be exploited by authenticated users...

EUVD-2010-1763

Malware in sbrugna...

CVE-2014-8673

Multiple SQL vulnerabilities exist in planning.php, userlist.php, projets.php, usergroupes.php, and groupelist.php in Simple Online Planning SOPPlanningbefore 1.33...

SOPlanning 1.52.00 SQL Injection Vulnerability

Exploit Title: SOPlanning v1.52.00 'projets.php' SQLi Application: SOPlanning Version: 1.52.00 Exploit Author: Joseph McPeters Liquidsky Vendor Homepage: https://www.soplanning.org/en/ Software Link: https://sourceforge.net/projects/soplanning/ Tested on: Linux CVE: Not yet assigned Description:...

CVE-2024-25218

A cross-site scripting XSS vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Project Name parameter /TaskManager/Projects.php...

CVE-2024-25218

A cross-site scripting XSS vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Project Name parameter /TaskManager/Projects.php...

anandaguru.com XSS vulnerability

Vulnerable URL: http://www.anandaguru.com/projects.php?propertystatus=1/-///'/"//--...

chaosfactory.tv XSS vulnerability

Vulnerable URL: http://chaosfactory.tv/TCF-Projects.php?name= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check chaosfactory.tv SSL connection:| Grade: F...

popmuseum.cz XSS vulnerability

Vulnerable URL: http://www.popmuseum.cz/projects/projects.php?q=' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24837507 VIP website status:| No Check popmuseum.cz SSL connection:...

mIRC - projects.php Cross-Site Scripting

mIRC - projects.php Cross-Site Scripting source: https://www.securityfocus.com/bid/54989/info mIRC is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

mIRC - 'projects.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54989/info mIRC is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

phpFolio Script SQL Injection

phpFolio script projects.php SQL Injection Vulnerability Author : CoBRa21 Dork : "Powered By phpFolio" Script Name : phpFolio Script Page : http://phpfolio.com/ close Thanks : E-Banka.Org & Cyber-Warrior.Org & Ordu-yu Lojistik TIM Exploit http://localhost/ PATH /projects.php?id=21458'...

CVE-2010-1743

SQL injection vulnerability in projects.php in Scratcher allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in projects.php in Scratcher allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-1742

Cross-site scripting XSS vulnerability in projects.php in Scratcher allows remote attackers to inject arbitrary web script or HTML via the show parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in projects.php in Scratcher allows remote attackers to inject arbitrary web script or HTML via the show parameter...

CVE-2010-1742

CVE-2010-1742 describes a cross-site scripting (XSS) vulnerability in the Scratcher application, specifically in the contents rendered from projects.php via the show parameter. The underlying issue is that user-supplied input in show is not sanitized, enabling remote attackers to inject arbitrary...

CVE-2010-1743

CVE-2010-1743 describes an SQL injection in Scratcher's projects.php, exploitable via the id parameter to remotely execute arbitrary SQL commands. The vulnerability affects the application as described and has a CVSSv2 base score of 7.5 (HIGH). Public references cite multiple advisories and an ex...

CVE-2010-1742

Cross-site scripting XSS vulnerability in projects.php in Scratcher allows remote attackers to inject arbitrary web script or HTML via the show parameter...

CVE-2010-1743

SQL injection vulnerability in projects.php in Scratcher allows remote attackers to execute arbitrary SQL commands via the id parameter...