CVE-2024-9319 SourceCodester Online Timesheet App delete-timesheet.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Timesheet App 1.0. This affects an unknown part of the file /endpoint/delete-timesheet.php. The manipulation of the argument timesheet leads to sql injection. It is possible to initiate the attack remotely. The...

SourceCodester Online Timesheet App 跨站脚本漏洞

SourceCodester Online Timesheet App is a SourceCodester open source web application built with PHP and MySQL designed to simplify time management and task tracking. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Online Timesheet App, which stems from a cross-site...

PT-2024-39568 · Unknown · Sourcecodester Online Timesheet App

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Timesheet App version 1.0 Description: A critical vulnerability was found in the SourceCodester Online Timesheet App, affecting an unknown part of the file /endpoint/delete-timesheet.php. The manipulation of the timeshee...

SourceCodester Online Timesheet App SQL注入漏洞

SourceCodester Online Timesheet App is a web application from SourceCodester built with PHP and MySQL designed to simplify time management and task tracking. A SQL injection vulnerability exists in the SourceCodester Online Timesheet App version 1.0, which stems from an SQL injection issue...

Insufficient Access Control

Kimai is vulnerable to Insufficient Granularity of Access Control. This vulnerability is due to the viewothertimesheet permission between the UI and API performing differently, leading to unauthorized access to timesheet entries...

Kimai API returns timesheet entries a user should not be authorized to view

Summary The permission viewothertimesheet performs differently for the Kimai UI and the API, thus returning unexpected data through the API. Details When setting the viewothertimesheet permission to true, on the frontend, users can only see timesheet entries for teams they are a part of. When...

CVE-2024-29200 API returns timesheet entries a user should not be authorized to view

Kimai is a web-based multi-user time-tracking application. The permission viewothertimesheet performs differently for the Kimai UI and the API, thus returning unexpected data through the API. When setting the viewothertimesheet permission to true, on the frontend, users can only see timesheet...

CVE-2024-29200 API returns timesheet entries a user should not be authorized to view

Kimai is a web-based multi-user time-tracking application. The permission viewothertimesheet performs differently for the Kimai UI and the API, thus returning unexpected data through the API. When setting the viewothertimesheet permission to true, on the frontend, users can only see timesheet...

CVE-2024-29200 API returns timesheet entries a user should not be authorized to view

Kimai is a web-based multi-user time-tracking application. The permission viewothertimesheet performs differently for the Kimai UI and the API, thus returning unexpected data through the API. When setting the viewothertimesheet permission to true, on the frontend, users can only see timesheet...

PT-2024-22803

Name of the Vulnerable Software and Affected Versions Kimai versions prior to 2.13.0 Description The permission view other timesheet performs differently for the Kimai UI and the API, thus returning unexpected data through the API. When setting the view other timesheet permission to true, on the...

Kimai 安全漏洞

Kimai is an open source, web-based, multi-user time tracking application. A security vulnerability exists in versions prior to Kimai 2.13.0, which stems from the API returning timesheet entries that should not be viewed by authorized users...

CVE-2023-49943

Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS by a low-privileged technician via a task's name in a time sheet...

Exploit for CVE-2024-24138

CVE-2024-24138: Online Timesheet App SQL Injec...

CVE-2023-2973

A vulnerability, which was classified as problematic, has been found in SourceCodester Students Online Internship Timesheet Syste 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=savecompany. The manipulation of the argument name with the input...

CVE-2023-2973 SourceCodester Students Online Internship Timesheet Syste cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Students Online Internship Timesheet Syste 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=savecompany. The manipulation of the argument name with the input...

CVE-2023-2973

CVE-2023-2973 affects SourceCodester Students Online Internship Timesheet System 1.0. Affected component: /ajax.php?action=save_company; root cause is manipulation of the name parameter that enables cross-site scripting (stored/reflected-style demonstrated input: ). The vulnerability allows remot...

Students Online Internship Timesheet System 跨站脚本漏洞

Students Online Internship Timesheet System is an online internship timesheet system for students by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Students Online Internship Timesheet System version 1.0, which stems from an incorrect manipulation of the...

Students Online Internship Timesheet System sql Injection Vulnerability

Students Online Internship Timesheet System is an online internship timesheet system for students. Students Online Internship Timesheet System version 1.0 suffers from a sql injection vulnerability, which can be exploited by attackers to perform SQL injection and steal data...

PT-2023-22381 · Sourcecodester · Students Online Internship Timesheet System

Name of the Vulnerable Software and Affected Versions: SourceCodester Students Online Internship Timesheet System version 1.0 Description: A problematic issue has been found, affecting some unknown functionality of the file "/ajax.php?action=save company". The manipulation of the name argument wi...

CVE-2023-2973: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Students Online Internship Timesheet Syste 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=savecompany. The manipulation of the argument name with the input leads to cross...