13 matches found
CVE-2024-39250
CVE-2024-39250 PoC nuclei template Efrotech's http://www.efrotech.com/ TimeTrax https://etimetrax.com/は人事勤怠管理プログラムであり、認証不要のSQLインジェクションの脆弱性を発見しました。攻撃ベクトルの実行は容易であるため、nucleiテンプレートを作成しました。...
EfroTech Timetrax v8.3 - Sql Injection
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface. id: CVE-2024-39250 info: name: EfroTech Timetrax v8.3 - Sql Injection author: s4e-io,efran severity: high description: | EfroTech Timetrax v8.3 was...
CVE-2025-46157
CVE-2025-46157 CVE-2025-46157 – Timetrax V1 2025 Ejecución Remota de Código y Escalada de Privilegios Resumen Se descubrió una vulnerabilidad crítica en Timetrax V1 2025 que permite a usuarios autenticados eludir las restricciones de subida de archivos y lograr ejecución remota de código RCE. El...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
Exploit for Unrestricted Upload of File with Dangerous Type in Efrotech Timetrax
CVE-2025-46157 CVE-2025-46157 – Timetrax V1 2025 Remote Co...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
PT-2024-28411 · Efrotech · Efrotech Timetrax
Name of the Vulnerable Software and Affected Versions: EfroTech Timetrax version 8.3 Description: The issue is related to an unauthenticated SQL injection vulnerability. This vulnerability can be exploited via the q parameter in the search web interface. Recommendations: For EfroTech Timetrax...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
EfroTech Timetrax 安全漏洞
EfroTech Timetrax is a human resource management program from EfroTech. A security vulnerability exists in EfroTech Timetrax version 8.3, which stems from an unauthenticated SQL injection vulnerability in the q parameter in the search web interface...
CVE-2024-39250
EfroTech Timetrax v8.3 is affected by an unauthenticated SQL injection via the q parameter in the search web interface. The issue, detailed in the CVE-2024-39250/Nuclei template, allows unauthenticated attackers to perform SQL injection against the Timetrax database. The vulnerability is associat...