Online Project Time Management System 1.0 - SQLi (Authenticated)

Exploit Title: Online Project Time Management System 1.0 - SQLi Authenticated Date: 19/01/2022 Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Online Project Time Management System 1.0 - Multiple Stored Cross Site Scripting Vulnerabilities

Exploit Title: Online Project Time Management System 1.0 - Multiple Stored XSS Authenticated Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Online Project Time Management System 1.0 - Multiple Stored Cross Site Scripting (XSS) (Authenticated)

Exploit Title: Online Project Time Management System 1.0 - Multiple Stored XSS Authenticated Date: 19/01/2022 Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2021-46451

An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter in the loadfile function...

CVE-2021-46451

An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter in the loadfile function...

CVE-2021-46451

An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter in the loadfile function...

Sql injection

An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter in the loadfile function...

CVE-2021-46451

Sourcecodester Online Project Time Management System 1.0 is affected by an SQL injection via the pid parameter in the load_file function. Root cause: lack of validation of externally entered SQL statements in the database-based application. Impact: arbitrary SQL execution with high confidentialit...

CVE-2021-46451

An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter in the loadfile function...

Sourcecodester Online Project Time Management System SQL注入漏洞

Sourcecodester Online Project Time Management System is a web-based online project time management system that provides an online platform for a company's employees to report/record their assigned time or the time each project is resubmitted. sourcecodester Online Project Time Management System i...

Online Project Time Management 1.0 SQL Injection Vulnerability

Title: Online Project Time Management 1.0 Multiple SQL - Injections Author: nu11secur1ty Date: 01.20.2022 Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/15136/online-project-time-management-system-phpoop-free-source-code.html Description: The pid...

Qnap QcalAgent 跨站脚本漏洞

Qnap QcalAgent is a time management center from China Weilian Technology Qnap. It is used to manage personal schedules, share calendars with others, and share each other's schedules. QNAP QcalAgent suffers from a cross-site scripting vulnerability that stems from insufficient cleaning of...

Unauthorized Access Vulnerability in ZKECO's Time & Security Management Platform

hereinafter referred to as: Entropy Base Technology is a national high-tech enterprise specializing in providing intelligent identity verification, intelligent entrance/exit management and intelligent office products and solutions with biometrics as the core technology. Unauthorized access...

CVE-2021-30174

RiyaLab CloudISO event item is added, special characters in specific field of time management page are not properly filtered, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks...

CVE-2021-30174

RiyaLab CloudISO event item is added, special characters in specific field of time management page are not properly filtered, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks...

Cross site scripting

RiyaLab CloudISO event item is added, special characters in specific field of time management page are not properly filtered, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks...

CVE-2021-30174 RiyaLab Co., Ltd. CloudISO - Stored XSS

RiyaLab CloudISO event item is added, special characters in specific field of time management page are not properly filtered, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS Stored Cross-site scripting attacks...

CVE-2021-30174

CVE-2021-30174 affects RiyaLab CloudISO. The vulnerability arises from insufficient input filtering of special characters in a time-management page field, enabling remote authenticated attackers to inject JavaScript and perform stored XSS. Exploitation details, affected versions, and a published ...

瑞研科技 CloudISO 跨站脚本漏洞

Ruyan Technology CloudISO is an application system of China Ruyan Technology Co. A file control system. A cross-site scripting vulnerability exists in Ruiyan Technology CloudISO. The vulnerability stems from the program not properly filtering special characters in specific fields on the time...

Weak Password Vulnerability in Time Refinement Management Platform of Entropy Base Technology Co. Ltd (CNVD-2021-30899)

formerly known as: China Control Intelligence Technology Co., Ltd. was founded in 2007, focusing on the research of hybrid biometrics technology and the application of technology enterprises, is a "people, vehicles, things" based on the entrance and exit time and security management system produc...