CVE-2021-47720

Mô tả

Tham khảo

• exploit-db.com/exploits/50553 · Exploit
• orangescrum.org · Product
• vulncheck.com/advisories/orangescrum-authenticated-sql-injection-via-multiple-parameters · Third Party Advisory

Lỗ hổng khác của orangescrum

• CVE-2021-47721CAO 8.8Orangescrum 1.8.0 contains a privilege escalation vulnerability that allows authenticated users to take over other project-assigned accounts…
• CVE-2021-47716TRUNG BÌNH 5.4Orangescrum 1.8.0 contains multiple cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts thro…
• CVE-2024-48392TRUNG BÌNH 5.4OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into user email due to lac…
• CVE-2023-1783CAO 7.6OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application…
• CVE-2023-0738TRUNG BÌNH 6.1OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is possible because the …