841 matches found
CVE-2017-17989: Improper Neutralization of Input During Web Page Generation
Biometric Shift Employee Management System has XSS via the index.php holidayname parameter in an editholiday action...
CVE-2017-17994: Improper Neutralization of Input During Web Page Generation
Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competencycriteria request...
CVE-2017-17990: Cross-Site Request Forgery (CSRF)
Biometric Shift Employee Management System has CSRF via index.php in an editholiday action...
CVE-2017-17995: Improper Neutralization of Input During Web Page Generation
Biometric Shift Employee Management System has XSS via the LastName parameter in an index.php?user=ajax request...
Biometric Shift Employee Management System File Read Limit Bypass Vulnerability
Biometric Shift Employee Management System is an employee management system. A file read restriction bypass vulnerability exists in Biometric Shift Employee Management System 3.0. A remote attacker can bypass the expected file read restriction via a user=download request with pathname in the path...
CVE-2017-17876
Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter...
CVE-2017-17876
Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter...
CVE-2017-17876
Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter...
Design/Logic Flaw
Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter...
Biometric Shift Employee Management System 3.0 - Local File Disclosure Vulnerability
Exploit for php platform in category web applications Exploit Title: Biometric Shift Employee Management System 3.0 - Local File Download Dork: N/A Date: 24.12.2017 Vendor Homepage: https://www.shiftsystems.net/ Software Link:...
CVE-2017-17876: Undefined Security Weakness
Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter...
CVE-2017-17876
Biometric Shift Employee Management System 3.0 is affected. The vulnerability lets remote attackers bypass file-read restrictions via a user=download request with a pathname in the path parameter, enabling local file disclosure. This is corroborated by CNVD/NVD entries and Exploit-DB references (...
Biometric Shift Employee Management System 3.0 - Local File Disclosure
Biometric Shift Employee Management System 3.0 - Local File Disclosure Exploit Title: Biometric Shift Employee Management System 3.0 - Local File Download Dork: N/A Date: 24.12.2017 Vendor Homepage: https://www.shiftsystems.net/ Software Link:...
PT-2017-15065
Name of the Vulnerable Software and Affected Versions Biometric Shift Employee Management System version 3.0 Description The issue allows remote attackers to bypass intended file-read restrictions. This can be achieved via a user=download request with a pathname in the path parameter...
Biometric Shift Employee Management System 3.0 Local File Disclosure
Exploit Title: Biometric Shift Employee Management System 3.0 - Local File Download Dork: N/A Date: 24.12.2017 Vendor Homepage: https://www.shiftsystems.net/ Software Link: https://codecanyon.net/item/white-label-shift-employee-management-system/21061908 Version: 3.0 Category: Webapps Tested on:...
Biometric Shift Employee Management System 3.0 - Local File Disclosure
Exploit Title: Biometric Shift Employee Management System 3.0 - Local File Download Dork: N/A Date: 24.12.2017 Vendor Homepage: https://www.shiftsystems.net/ Software Link: https://codecanyon.net/item/white-label-shift-employee-management-system/21061908 Version: 3.0 Category: Webapps Tested on:...
Kony EMM 1.2 Insecure Direct Object Reference
------------------------------------------------------------------------ Product: Enterprise Mobile Management Vendor: Kony Vulnerable Versions: Kony EMM 1.2 and probably older versions Tested Version: Drupal Kony EMM 1.2 Advisory Publication: 24 December 2014 Vendor Notification: 8 December 2014...
ZKSoftware Biometric Attendence Managnmnet Hardware[MIPS] 2 - Improper Authentication
Exploit Title: ZKSoftware Biometric Attendence managnmnet HardwareMIPS Improper Authentication. Date: 20-3-2010 Author: FB1H2S Software Link: http://www.esslindia.com/install/eTimeTrack.zip Version: V2 Tested on: category: Remote Code : Advisory ZKSoftware Biometric Attendence management...