CVE-2014-8673

Description

References

• packetstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.html · Exploit
• seclists.org/fulldisclosure/2015/Jul/44 · Exploit
• securityfocus.com/bid/75726 · Exploit
• exploit-db.com/exploits/37604 · Exploit

soplanning 的其他漏洞

• CVE-2025-62731中危 4.8SOPlanning is vulnerable to Stored XSS in /feries endpoint. Malicious attacker with access to public holidays feature is able to inject arbi…
• CVE-2025-62730高危 8.8SOPlanning is vulnerable to Privilege Escalation in user management tab. Users with user_manage_team role are allowed to modify permissions …
• CVE-2025-62729中危 5.4SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS into website…
• CVE-2025-62297中危 5.4SOPlanning is vulnerable to Stored XSS in /projets endpoint. Malicious attacker with medium privileges can inject arbitrary HTML and JS into…
• CVE-2025-62296中危 5.4SOPlanning is vulnerable to Stored XSS in /taches endpoint. Malicious attacker with medium privileges can inject arbitrary HTML and JS into …