Icon Time Systems RTC-1000 Firmware 2.5.7458 - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Icon Time Systems RTC-1000 alert"xss"; ========================================================== PROOF OF CONCEPT - With valid credentials that has permissions to modify the employee records, access the employeelist...

Cross site scripting

A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst aka First Name field for the employee details page /employee.html that is then reflected in multiple pages where...

PT-2017-14580

Name of the Vulnerable Software and Affected Versions Icon Time Systems RTC-1000 versions 2.5.7458 and earlier Description A stored cross-site scripting issue allows remote attackers to inject arbitrary JavaScript in the nameFirst field for the employee details page "/employee.html" that is then...

CVE-2017-16819: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst aka First Name field for the employee details page /employee.html that is then reflected in multiple pages where...