| Max CVSS | 7.5 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-8674 | 3.5 |
Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the document.cookie in nb_mois and mb_ligness and the debug GET parameter to export.php, which allows malicious users to execute arbitrar
|
10-01-2020 - 18:19 | 06-01-2020 - 22:15 | |
| CVE-2014-8673 | 7.5 |
Multiple SQL vulnerabilities exist in planning.php, user_list.php, projets.php, user_groupes.php, and groupe_list.php in Simple Online Planning (SOPPlanning)before 1.33.
|
08-01-2020 - 15:54 | 07-01-2020 - 18:15 | |
| CVE-2014-8677 | 3.5 |
The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2 is being u
|
06-09-2017 - 20:17 | 31-08-2017 - 22:29 | |
| CVE-2014-8675 | 5.0 |
Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash.
|
06-09-2017 - 02:17 | 31-08-2017 - 22:29 | |
| CVE-2014-8676 | 5.0 |
Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in a URL path parameter.
|
05-09-2017 - 18:06 | 31-08-2017 - 22:29 |