TI-2021-03127 CVE-2021-4269 · GHSA-h68q-ghcw-fvww
SimpleRisk common.js checkAndSetValidation cross site scripting
Priority LOW 28
A vulnerability has been found in SimpleRisk and classified as problematic.
Vulnerabilities
4 records
TI-2017-07825 CVE-2017-10711 · GHSA-mgcf-42wq-rwx5
In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email…
Priority LOW 29
In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameter.
TI-2013-04888 CVE-2013-5749 · GHSA-5w2h-v8xg-x9vg
Cross-site scripting (XSS) vulnerability in management/prioritize_planning.php in…
Priority LOW 23
Cross-site scripting (XSS) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to inject arbitrary web script or HTML via the new_project parameter.
TI-2013-04887 CVE-2013-5748 · GHSA-g57r-gxm5-v65v
Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in…
Priority LOW 34
Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to hijack the authentication of users for requests that add projects via an…