359 matches found
CVE-2023-2955
A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file renderedreport.php of the component GET Parameter Handler. The manipulation of the argument sid leads to sql injection. It is...
CVE-2023-2955
A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file renderedreport.php of the component GET Parameter Handler. The manipulation of the argument sid leads to sql injection. It is...
CVE-2023-2955 SourceCodester Students Online Internship Timesheet System GET Parameter rendered_report.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file renderedreport.php of the component GET Parameter Handler. The manipulation of the argument sid leads to sql injection. It is...
Students Online Internship Timesheet System SQL注入漏洞
Students Online Internship Timesheet System is an online internship timesheet system for students. Students Online Internship Timesheet System version 1.0 suffers from a sql injection vulnerability, which can be exploited by attackers to perform SQL injection and steal data...
CVE-2023-2955: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file renderedreport.php of the component GET Parameter Handler. The manipulation of the argument sid leads to sql injection. It is...
CVE-2022-44726
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
CVE-2022-44726
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
Design/Logic Flaw
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
CVE-2022-44726
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
CVE-2022-44726
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
PT-2023-14539 · Unknown · Touchdown Timesheet Tracking Component For Jira
Name of the Vulnerable Software and Affected Versions: TouchDown Timesheet tracking component for Jira version 4.1.4 Description: The issue allows for XSS in the calendar view. Recommendations: For version 4.1.4, update to a version that fixes the XSS issue in the calendar view, as the current...
CVE-2022-44726
CVE-2022-44726 affects TouchDown Timesheet tracking component for Jira (version 4.1.4). The calendar view is vulnerable to stored XSS, enabling script execution in the context of affected pages. Public details in connected sources corroborate a calendar-view XSS risk; no concrete exploit details ...
TouchDown Timesheet Tracking for Jira 跨站脚本漏洞
TouchDown Timesheet Tracking for Jira is an easy-to-use timesheet reporting component from TouchDown, Switzerland. A security vulnerability exists in TouchDown Timesheet Tracking for Jira version 4.1.4, which stems from a stored cross-site scripting XSS vulnerability in the calendar view...
CVE-2022-44726: Improper Neutralization of Input During Web Page Generation
The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...
Cross site request forgery (csrf)
A vulnerability was found in dolibarrprojecttimesheet up to 4.5.5. It has been declared as problematic. This vulnerability affects unknown code of the component Form Handler. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. Upgrading to version 4.5.6.a i...
dolibarr_project_timesheet 跨站请求伪造漏洞
dolibarrprojecttimesheet is a Dolibarr project timesheet view by Patrick Delcroix Personal Developer. A cross-site request forgery vulnerability exists in dolibarrprojecttimesheet versions prior to 4.5.6.a. The vulnerability stems from an issue with unknown code in the component Form Handler, whi...
PT-2022-28080 · Unknown · Dolibarr Project Timesheet
Name of the Vulnerable Software and Affected Versions: dolibarr project timesheet versions up to 4.5.5 Description: A vulnerability was found in the Form Handler component, leading to cross-site request forgery. The attack can be initiated remotely. Recommendations: For versions up to 4.5.5,...
Kimai v2 is vulnerable to Cross-Site Scripting (XSS)
Kimai v2 before 1.1 has XSS via a timesheet description...