causefx/Organizr

GitHub

github.com

Releases66

Frequency1 week 5 days

Last Release over 7 years ago

Stars5.77K

HTPC/Homelab Services Organizer - Written in PHP

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-41370 ↗	Aug 29, 2024Thursday, 29 August 2024, 20:15	9.8 CRITICAL	—
Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php.
CVE-2024-41371 ↗	Aug 29, 2024Thursday, 29 August 2024, 20:15	6.1 MEDIUM	—
Organizr v1.90 is vulnerable to Cross Site Scripting (XSS) via api.php.
CVE-2024-41372 ↗	Aug 29, 2024Thursday, 29 August 2024, 20:15	9.8 CRITICAL	—
Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php.
CVE-2022-1909 ↗	May 27, 2022Friday, 27 May 2022, 09:15	5.4 MEDIUM	3.5 LOW
Cross-site Scripting (XSS) - Stored in GitHub repository causefx/organizr prior to 2.1.2200.
CVE-2022-1698 ↗	May 12, 2022Thursday, 12 May 2022, 16:15	7.5 HIGH	5 MEDIUM
Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.
CVE-2022-1699 ↗	May 12, 2022Thursday, 12 May 2022, 16:15	7.5 HIGH	5 MEDIUM
Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.
CVE-2022-1345 ↗	Apr 13, 2022Wednesday, 13 April 2022, 19:15	9 CRITICAL	3.5 LOW
Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.
CVE-2022-1347 ↗	Apr 13, 2022Wednesday, 13 April 2022, 19:15	8.4 HIGH	6 MEDIUM
Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub repository causefx/organizr prior to 2.1.1810. Account takeover and privilege escalation
CVE-2022-1346 ↗	Apr 13, 2022Wednesday, 13 April 2022, 18:15	9 CRITICAL	3.5 LOW
Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.
CVE-2022-1344 ↗	Apr 13, 2022Wednesday, 13 April 2022, 18:15	9 CRITICAL	3.5 LOW
Stored XSS due to no sanitization in the filename in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.