12 matches found
CVE-2024-9571
Cross-Site Scripting XSS vulnerability in SOPlanning 1.45, due to lack of proper validation of user input via /soplanning/www/process/xajaxserver.php, affecting multiple parameters. This could allow a remote user to send a specially crafted query to an authenticated user and partially take contro...
CVE-2024-9571: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting XSS vulnerability in SOPlanning 1.45, due to lack of proper validation of user input via /soplanning/www/process/xajaxserver.php, affecting multiple parameters. This could allow a remote user to send a specially crafted query to an authenticated user and partially take contro...
SOPlanning 1.52.00 Cross Site Request Forgery Vulnerability
/...
SOPlanning 1.52.00 Cross Site Request Forgery
/ !-- Update the following field to change the admins password to the...
Cross site request forgery (csrf)
SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajaxserver.php...
CVE-2020-9267
SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajaxserver.php...
CVE-2020-9266
SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xajaxserver.php...
CVE-2020-9266
SOPlanning 1.45 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that lets an attacker arbitrarily change the administrator password via the endpoint process/xajax_server.php. The underlying issue is a CSRF in the admin password change flow; this is documented across multiple sour...
CVE-2020-9267
CVE-2020-9267 affects SOPlanning 1.45, where a CSRF flaw in process/xajax_server.php allows an attacker to create arbitrary user accounts. The vulnerability is documented across multiple sources (NVD, Red Hat, CNVD, CVE.org) with consistent details that the issue is a CSRF risk in the SOPlanning ...
CVE-2020-9267
SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajaxserver.php...
CVE-2020-9266: Cross-Site Request Forgery (CSRF)
SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xajaxserver.php...