Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 44

Export CSV
CVE-2020-13963

SOPlanning before 1.47 has Incorrect Access Control because certain secret key information, and the related authentication algorithm, is public. The key for admin is hardcoded in the installation code, and there is no key for publicsp (which is a guest account).

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Soplanning
Products
Soplanning
CVE-2014-8674

Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the document.cookie in nb_mois and mb_ligness and the debug GET parameter to export.php, which allows malicious users to execute arbitrary code.

CVSS 3.1 · 5.4 Medium EPSS 2.6% KEV · Not listed
Vendors
Soplanning
Products
Soplanning
CVE-2014-8673

Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in Simple Online Planning (SOPPlanning)before 1.33.

CVSS 3.1 · 9.8 Critical EPSS 11.9% KEV · Not listed
Vendors
Soplanning
Products
Soplanning