1067 matches found
Biometric Shift Employee Management System Cross-Site Request Forgery Vulnerability
Biometric Shift Employee Management System is an employee management system. A cross-site request forgery vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited to conduct cross-site request forgery attacks via index.php in the editholiday operation...
Biometric Shift Employee Management System Arbitrary File Download Vulnerability
Biometric Shift Employee Management System is an employee management system. An arbitrary file download vulnerability exists in Biometric Shift Employee Management System. An attacker can download arbitrary files via a directory traversal sequence in the index.php formfilename parameter of the...
Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01397)
Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the amount parameter in the index.php?user=additiondeduction request...
Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01396)
Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited to conduct cross-site scripting attacks via the criteria parameter in the...
Cross site request forgery (csrf)
Biometric Shift Employee Management System has XSS via the expensename parameter in an index.php?user=expenses request...
Design/Logic Flaw
Biometric Shift Employee Management System has XSS via the index.php holidayname parameter in an editholiday action...
Directory traversal
Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php formfilename parameter in a downloadform action...
CVE-2017-17995
Biometric Shift Employee Management System has XSS via the LastName parameter in an index.php?user=ajax request...
CVE-2017-17991
Biometric Shift Employee Management System has XSS via the expensename parameter in an index.php?user=expenses request...
CVE-2017-17993
Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...
CVE-2017-17994
Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competencycriteria request...
CVE-2017-17995
Biometric Shift Employee Management System has XSS via the LastName parameter in an index.php?user=ajax request...
CVE-2017-17990
Biometric Shift Employee Management System has CSRF via index.php in an editholiday action...
CVE-2017-17989
Biometric Shift Employee Management System has XSS via the index.php holidayname parameter in an editholiday action...
Design/Logic Flaw
Biometric Shift Employee Management System has CSRF via index.php in an editholiday action...
Cross site request forgery (csrf)
Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...
CVE-2017-17993
Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...
CVE-2017-17992
Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php formfilename parameter in a downloadform action...