← back
CVE-2014-8674

CVE-2014-8674

EPSS 2.6%
Multiple Cross-Site Scripting (XSS) vulnerabilities exist in Simple Online Planning (SOPlanning) before 1.33 via the document.cookie in nb_mois and mb_ligness and the debug GET parameter to export.php, which allows malicious users to execute arbitrary code.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.htmlunverifiedcve_referencewww.exploit-db.com/exploits/37604/unverifiedexploitdbwww.exploit-db.com/exploits/37604unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.htmlhttp://seclists.org/fulldisclosure/2015/Jul/44https://www.exploit-db.com/exploits/37604/http://www.securityfocus.com/bid/75726