14 matches found
EfroTech Timetrax v8.3 - Sql Injection
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface. id: CVE-2024-39250 info: name: EfroTech Timetrax v8.3 - Sql Injection author: s4e-io,efran severity: high description: | EfroTech Timetrax v8.3 was...
CVE-2024-39250
CVE-2024-39250 PoC nuclei template Efrotech's http://www.efrotech.com/ TimeTrax https://etimetrax.com/は人事勤怠管理プログラムであり、認証不要のSQLインジェクションの脆弱性を発見しました。攻撃ベクトルの実行は容易であるため、nucleiテンプレートを作成しました。...
CVE-2025-46157
CVE-2025-46157 CVE-2025-46157 – Timetrax V1 2025 リモートコード実行および権限昇格 概要 Timetrax V1 2025 に重大な脆弱性が発見されました。この脆弱性により、認証済みユーザーがファイルアップロード制限を回避し、リモートコード実行（RCE） を達成できます。この問題は 勤怠（Attendance）モジュールの休暇申請（Leave Request）フォーム に存在し、サーバーサイドの検証が不十分なため、改変されたリクエストを介して悪意のある .asp ウェブシェルがアップロードされる可能性があります。...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
Exploit for Unrestricted Upload of File with Dangerous Type in Efrotech Timetrax
CVE-2025-46157 CVE-2025-46157 – Timetrax V1 2025 Remote Co...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
CVE-2024-39250: Improper Neutralization of Special Elements used in an SQL Command
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
PT-2024-28411 · Efrotech · Efrotech Timetrax
Name of the Vulnerable Software and Affected Versions: EfroTech Timetrax version 8.3 Description: The issue is related to an unauthenticated SQL injection vulnerability. This vulnerability can be exploited via the q parameter in the search web interface. Recommendations: For EfroTech Timetrax...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
CVE-2024-39250
EfroTech Timetrax v8.3 contains an unauthenticated SQL injection vulnerability located in the q parameter of the search web interface. An unauthenticated attacker can exploit this flaw to execute SQL commands, potentially allowing them to extract or modify sensitive database information . While a...
EfroTech Timetrax 安全漏洞
EfroTech Timetrax is a human resource management program from EfroTech. A security vulnerability exists in EfroTech Timetrax version 8.3, which stems from an unauthenticated SQL injection vulnerability in the q parameter in the search web interface...