Vulnerabilities

TI-2005-01644 CVE-2005-1737 · GHSA-69qx-h9rm-rjpj

Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view…

LOW 35

Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view or modify the project member list or (2) modify the todos list.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01283 Published 2005-05-24 No fix listed

TI-2005-01643 CVE-2005-1736 · GHSA-27xv-cgv3-x596

PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended.

LOW 35

PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01103 Published 2005-05-24 No fix listed

TI-2005-01642 CVE-2005-1735 · GHSA-5f4x-j5w6-2pm5

Multiple cross-site scripting (XSS) vulnerabilities in PROMS before 0.11 allow remote…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in PROMS before 0.11 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01164 Published 2005-05-24 No fix listed

TI-2005-01641 CVE-2005-1734 · GHSA-2v2w-7r2w-3hff

Multiple SQL injection vulnerabilities in PROMS before 0.11 allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in PROMS before 0.11 allow remote attackers to execute arbitrary SQL commands via unknown vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01198 Published 2005-05-24 No fix listed

Vulnerabilities

Filters

Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to (1) view…

PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended.

Multiple cross-site scripting (XSS) vulnerabilities in PROMS before 0.11 allow remote…

Multiple SQL injection vulnerabilities in PROMS before 0.11 allow remote attackers to…