Skip to content
OpenAdvisories

Vendor

Orangescrum

4 known vulnerabilities.

Products

orangescrum 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2021-47720

    Orangescrum 1.8.0 Authenticated SQL Injection via Multiple Parameters

    Orangescrum 1.8.0 contains an authenticated SQL injection vulnerability that allows authorized users to manipulate database queries through multiple vulnerable parameters. Attackers can inject malicious SQL code into parameters like old_project_id, project_id…

    Orangescrum orangescrum
  • High 8.8
    CVE-2021-47721

    Orangescrum 1.8.0 Authenticated Privilege Escalation via User Session Manipulation

    Orangescrum 1.8.0 contains a privilege escalation vulnerability that allows authenticated users to take over other project-assigned accounts by manipulating session cookies. Attackers can extract the victim's unique ID from the page source and replace their o…

    Orangescrum orangescrum