PT-2023-16339 · Sourcecodester · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file admin/expense report.php. The manipulation of the from date...

Dolibarr Stored Cross-site Scripting in expensereport/card.php

An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a public or private note...

Cross-Site Request Forgery (CSRF) in dolibarr/dolibarr

✍️ Description CSRF bug to set-paid expense-report 🕵️‍♂️ Proof of Concept Here it does not check token parameter for csrf .You can remove token paramater from url. bellow request is vulnerable to csrf attack when set-paid expense report....

CVE-2019-16417

HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...

CVE-2019-16417

HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...

CVE-2019-16416

HRworks 3.36.9 allows XSS via the purpose of a travel-expense report...

Design/Logic Flaw

HRworks 3.36.9 allows XSS via the purpose of a travel-expense report...

Design/Logic Flaw

HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...

CVE-2019-16417

HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...

CVE-2019-16417

CVE-2019-16417 affects HRworks FLOW 3.36.9. The vulnerability is described as XSS via the purpose of a travel-expense report. The connected documents confirm the affected product/version and the nature of the issue, but do not provide a root-cause analysis, specific vulnerable parameter/file, or ...

CVE-2019-16416

HRworks 3.36.9 contains an XSS vulnerability exploitable via the purpose field of a travel-expense report. The issue is documented across multiple connected sources (e.g., Red Hat CVE entry, NVD) with the same description. The provided documents do not specify a patch/version fixed or exploit det...

CVE-2019-16416

HRworks 3.36.9 allows XSS via the purpose of a travel-expense report...

CVE-2015-4825

Unspecified vulnerability in the PeopleSoft Enterprise FIN Expenses component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Expense Report General...

CVE-2015-4825

Unspecified vulnerability in the PeopleSoft Enterprise FIN Expenses component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Expense Report General...

CVE-2015-4825

Technical details are not publicly available in the provided documents. The connected sources do not reveal affected components, root cause, or remediation. Monitor for updates.