← back
CVE-2014-8675

CVE-2014-8675

EPSS 12.5%
Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.htmlunverifiedcve_referencewww.exploit-db.com/exploits/37604/unverifiedexploitdbwww.exploit-db.com/exploits/37604unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/132654/Simple-Online-Planning-Tool-1.3.2-XSS-SQL-Injection-Traversal.htmlhttp://seclists.org/fulldisclosure/2015/Jul/44https://www.exploit-db.com/exploits/37604/http://www.securityfocus.com/bid/75726