Dominique Righetto

Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio

The feature to manage resources is prone to Cross-Site Request Forgery attacks

XML External Entity (XXE) Injection in CyberELF NanoXML

The feature to import a survey is prone to stored Cross-Site Script attacks

Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOpenDocument: 1.5.

Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data. This issue affects OpenConcerto: 1.7.5.

Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5.