Cydave

Kanboard is project management software focused on the Kanban methodology. Versions prior to 1.2.51 have an authenticated SQL injection issue. Attackers with permission to add users to a project can exploit this to dump the entire Kanboard database. The vulnerability allows for SQL injection through the addition of users to a project. The `add users` functionality is the point of exploitation. Version 1.2.51 resolves this issue.

Foi identificada uma vulnerabilidade de Injeção de SQL no Framework Frappe, que poderia permitir que um ator malicioso acessasse informações sensíveis.

The issue is related to a SQL injection problem. It occurs because a parameter is not properly sanitized and escaped before being used in a SQL statement. This can be exploited by authenticated users.

The issue allows unauthenticated attackers to upload arbitrary files, such as PHP files, to the server due to a lack of file validation for uploads. This could potentially lead to server compromise.

The issue arises from the plugin's failure to properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitized and escaped before being outputted back in the page. This could be exploited against a user with at least Contributor permission.

The issue arises from the plugin's failure to properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

The issue allows unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege user, such as an admin, visits a page from the plugin. This occurs because the plugin does not properly sanitise and escape some parameters.

The issue arises from improper sanitization and escaping of a parameter in a SQL statement, which is accessible via an AJAX action to unauthenticated users, leading to SQL injection.

The issue concerns a lack of validation for files to be deleted via an AJAX action, which is accessible to unauthenticated users. This could allow attackers to delete arbitrary files on the server using a path traversal attack.

The issue is related to a Reflected Cross-Site Scripting attack, which could be used against logged-in high-privilege users, such as admins. This occurs because the plugin does not properly sanitise and escape a `parameter` before outputting it back in the page. The exploitation of this issue may allow a remote attacker to conduct cross-site scripting attacks.

The issue concerns a Reflected Cross-Site Scripting problem. It arises because a parameter is not properly sanitized and escaped before being outputted back in the page. This could be exploited against both unauthenticated and authenticated users, including those with high privileges like administrators.

The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a `parameter` is not properly sanitized and escaped before being outputted back in the page. This allows for malicious scripts to be injected and executed.

The issue is related to a Reflected Cross-Site Scripting that can be used against high privilege users such as admin, due to the plugin not sanitising and escaping a parameter before outputting it back in the page.

The issue is related to the Sunshine Photo Cart WordPress plugin, which does not properly sanitise and escape a `parameter` before outputting it back in the page. This leads to a Reflected Cross-Site Scripting (XSS) attack. The exploitation of this issue may allow a remote attacker to conduct an XSS attack.

The issue is related to a Reflected Cross-Site Scripting susceptibility in a vendored dompdf example file included in the PDF Generator for WordPress plugin. This could be exploited against high-privilege users, such as administrators. The vulnerability is associated with the lack of protection measures for the web page structure, potentially allowing a remote attacker to conduct cross-site scripting attacks.

The issue allows unauthenticated users to upload arbitrary files, including malicious PHP code, which could lead to remote code execution (RCE). This is due to a lack of validation for uploaded files.

The issue arises from the plugin's failure to properly sanitise and escape certain parameters before using them in SQL statements, which are accessible to unauthenticated users. This leads to unauthenticated SQL injection.

The issue is related to a lack of sanitization and escaping of some parameters before using them in SQL statements via an AJAX action. This can lead to SQL injection, potentially allowing a remote attacker to execute arbitrary SQL queries. The vulnerability is exploitable by unauthenticated users.

The issue is related to a SQL injection that can be exploited by unauthenticated users due to improper sanitization and escaping of a parameter in a SQL statement.