3136 matches found
UBUNTU-CVE-2018-19998
SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter...
CVE-2018-19998
SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter...
CVE-2018-19998: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter...
PT-2019-9961 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: Dolibarr version 8.0.2 Description: A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands via the employee parameter in the user/card.php file. Recommendations: For Dolibarr version 8.0.2, consider...
Design/Logic Flaw
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature...
CVE-2018-20485
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature...
CVE-2018-20485
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature...
CVE-2018-20485
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature...
CVE-2018-20485
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 is affected by a Cross‑Site Scripting (XSS) vulnerability in the Employee Search feature. The issue originates from an XSS flaw in the employee search handling, enabling injection of arbitrary web script or HTML. Public sources (e.g., exp...
SQL Injection Vulnerability in File System Profile Frontend Bi***.ashx Page
The filing system Profile is an in-house employee management software. A SQL injection vulnerability exists in the frontend Bi.ashx page of File System Profile, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in File System Profile Frontend ge***.aspx Page
The filing system Profile is an in-house employee management software. A SQL injection vulnerability exists in the front-end ge.aspx page of File System Profile, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2018-20485: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature...
Adrenalin HRMS Software Cross-Site Scripting Vulnerability (CNVD-2018-26800)
Adrenalin HRMS Software is a human resource management system from Adrenalin eSystems India. A cross-site scripting vulnerability exists in Adrenalin HRMS Software version 5.4.0, which can be exploited by a remote attacker to execute JavaScript code by sending the 'prntFrmName' or '...
CVE-2018-12651
A Reflected Cross Site Scripting XSS Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the ShiftEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter...
Hackers Succeed in NASA Mission, Lifting Thousands of Employee Records
NASA has become the latest victim of a breach, but it’s unlikely that sensitive space mission data was impacted. In an internal memo sent to employees, NASA admitted that it was hacked by an unauthorized intruder in October, and that personally identifiable information for thousands of employees...
Mayday! NASA Warns Employees of Personal Information Breach
Another day, another data breach. This time it's the United States National Aeronautics and Space Administration NASA NASA today confirmed a data breach that may have compromised personal information of some of its current and former employees after at least one of the agency's servers was hacked...
Closing the Gap: An Exciting Initiative to Drive More Gender Diversity in Tech
We all know there’s a global IT skills crisis. In cybersecurity things are even worse, with a shortfall of nearly three million roles estimated today — 500,000 of which are in North America. Today women comprise just 24% of the workforce yet half of the global population. Why is this? Women were...
The Importance of Employee Cybersecurity Training: Top Strategies and Best Practices
For those responsible for overseeing the data protection and cybersecurity of an organization, it's a familiar storyline: "Employee opens email attachment and infects business with ransomware." Headlines to this effect are nothing new. Even the most advanced security solutions can't completely...
File Box for Citrix User FAQs
File Box for Citrix User Frequently Asked Questions Who can use File Box with my Citrix Workspace account? File Box is only available to Employee users. Clients who you send files to cannot use the File Box. For more information on Users versus Client access, refer to Workspace: Employees vs...
