Enterprise TimeSheet and Payroll (EPS) <= v.1.1 Remote File Include Vulnerability

$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Enterprise TimeSheet and Payroll EPS = v.1.1 Remote File Include Vulnerability $$ Script site: http://epayroll.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper a.k.a Rahi...

[eVuln] PHP/MYSQL Timesheet Multiple SQL Injection Vulnerabilities

New eVuln Advisory: PHP/MYSQL Timesheet Multiple SQL Injection Vulnerabilities http://evuln.com/vulns/67/summary.html --------------------Summary---------------- eVuln ID: EV0067 Software: PHP/MYSQL Timesheet Sowtware's Web Site: http://www.geocities.com/night247/ Versions: V1, V2 Critical Level:...

CVE-2006-0692

Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the 1 yr, 2 month, 3 day, and 4 job parameters in a index.php and b changehrs.php...

Sql injection

Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the 1 yr, 2 month, 3 day, and 4 job parameters in a index.php and b changehrs.php...

CVE-2006-0692

Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the 1 yr, 2 month, 3 day, and 4 job parameters in a index.php and b changehrs.php...

CVE-2006-0692

CVE-2006-0692 affects Carey Briggs PHP/MySQL Timesheet (versions 1 and 2). The vulnerability is SQL injection in the server-side code handling the parameters yr, month, day, and job passed to index.php and changehrs.php, allowing remote attackers to execute arbitrary SQL commands. Root cause is u...