CVE-2024-48530

The eSoft Planner scheduling software (version 3.24.08271-USA ) is vulnerable to a Denial of Service (DoS) attack. The flaw exists within the Instructor Appointment Availability module , where an attacker can trigger the DoS by sending a crafted POST request . This issue is associated with CWE-77...

CVE-2024-48533

The eSoft Planner scheduling software version 3.24.08271-USA is vulnerable to an account enumeration flaw. A discrepancy in the responses provided for valid versus invalid email accounts within the Forgot your Login? module allows an attacker to identify valid user email addresses. As a remediati...

CVE-2024-48534

A reflected cross-site scripting (XSS) vulnerability exists in the Camp Details module of eSoft Planner version 3.24.08271-USA . The root cause is the improper neutralization of input during web page generation, which allows an attacker to inject a crafted payload to execute arbitrary code in the...

CVE-2024-48531

The eSoft Planner 3.24.08271-USA software contains a reflected cross-site scripting (XSS) vulnerability within its Rental Availability module. This flaw allows an attacker to execute arbitrary code in the context of a user's browser by injecting a crafted payload, which could lead to unauthorized...

CVE-2024-48536

The scheduling software eSoft Planner version 3.24.08271-USA is affected by an incorrect access control vulnerability. By supplying a crafted web request , an attacker can bypass security measures to view all transactions performed by the company. This vulnerability was identified in the software...

CVE-2024-48535

A stored cross-site scripting (XSS) vulnerability exists in eSoft Planner version 3.24.08271-USA , a scheduling software for managing sports facilities. The flaw stems from the improper neutralization of input during web page generation , specifically allowing an attacker to inject a crafted payl...