simplerisk/documentation

simplerisk/documentation

GitHubGitHub
GitHubgithub.com
www.simplerisk.comwww.simplerisk.com
Releases0
All documentation and release notes for SimpleRisk.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2013-5748↗
—6.8 MEDIUM

Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to hijack the authentication of users for requests that add projects via an add_project action.

CVE-2013-5749↗
—4.3 MEDIUM

Cross-site scripting (XSS) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to inject arbitrary web script or HTML via the new_project parameter.