Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view…
Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view or modify the project member list or (2) modify the todos list.
No Electricmonk vulnerabilities are listed in CISA KEV.
4 records in Proms · all components
Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view or modify the project member list or (2) modify the todos list.
PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended.
Multiple SQL injection vulnerabilities in PROMS before 0.11 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
Multiple cross-site scripting (XSS) vulnerabilities in PROMS before 0.11 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.