CVE-2014-5132

Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses.

• CWE-200

• http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/533345/100/0/threadedThird Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95737Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/533345/100/0/threadedThird Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95737Third Party Advisory, VDB Entry

Published

Mar 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-5122Open redirect vulnerability in ESRI ArcGIS for Server 10.1.1…
• CVE-2014-5127Open redirect vulnerability in Innovative Interfaces Encore …
• CVE-2014-5128Innovative Interfaces Encore Discovery Solution 4.3 places a…
• CVE-2014-5129Cross-site scripting (XSS) vulnerability in Avolve Software …
• CVE-2014-5130Avolve Software ProjectDox 8.1 allows remote authenticated u…
• CVE-2014-5131Avolve Software ProjectDox 8.1 makes it easier for remote au…
• CVE-2014-5136Cross-site scripting (XSS) vulnerability in Innovative Inter…
• CVE-2014-5137Innovative Interfaces Sierra Library Services Platform 1.2_3…
• CVE-2014-5138Innovative Interfaces Sierra Library Services Platform 1.2_3…7.5
• CVE-2014-5139The ssl_set_client_disabled function in t1_lib.c in OpenSSL …
• CVE-2014-5140The bindReplace function in the query factory in includes/cl…8.8
• CVE-2014-5144Cross-site scripting (XSS) vulnerability in Telescope before…