EDB-37604
PoCSO Planning 1.32 - Multiple Vulnerabilities
Exploit ansehen Quelle exploit_dbTyp webappsAutor Huy-Ngoc DAUveröffentlicht 2015-07-13Katalog exploit_db
01
ausgenutzte CVEs (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-8673US | critical9.8 | Exploit | ||
Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in Simple Online Planning (SOPPlanning)before 1.33. | ||||
| CVE-2014-8674US | medium5.4 | Exploit | ||
Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the document.cookie in nb_mois and mb_ligness and the debug GET par… | ||||
| CVE-2014-8677US | medium5.3 | Exploit | ||
The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or perm… | ||||
| CVE-2014-8676US | medium5.3 | Exploit | ||
Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence of arbitrary files via a .. (d… | ||||
| CVE-2014-8675US | high7.5 | Exploit | ||
Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password v… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan