359 matches found
CVE-2019-1010287
Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may...
CVE-2019-1010287
Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may...
CVE-2019-1010287
Timesheet Next Gen vulnerable to reflected XSS (CVE-2019-1010287) in login.php (lines 40 and 54) via a redirect parameter. Affected: Timesheet Next Gen versions 1.5.3 and earlier. Impact: attacker can cause arbitrary HTML/JavaScript execution when a user clicks a malicious URL. Affected vector: r...
PT-2019-11542 · Timesheet · Timesheet Next Gen
Name of the Vulnerable Software and Affected Versions: Timesheet Next Gen versions 1.5.3 and earlier Description: The issue allows an attacker to execute arbitrary HTML and JavaScript code via a redirect parameter. This is a reflected Cross Site Scripting XSS attack, where the victim may click on...
CVE-2019-1010287: Improper Neutralization of Input During Web Page Generation
Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may...
Description of the security update for SharePoint Enterprise Server 2016: February 13, 2018
None None...
Description of the security update for Project Server 2013: May 8, 2018
Description of the security update for Project Server 2013: May 8, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Project Server 2013: February 13, 2018
Description of the security update for Project Server 2013: February 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
Description of the security update for SharePoint Server 2016: December 12, 2017
None None...
Description of the security update for Project Server 2013: November 14, 2017
Description of the security update for Project Server 2013: November 14, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
PT-2017-15230
Name of the Vulnerable Software and Affected Versions Captcha versions prior to 4.3.0 Car Rental versions prior to 1.0.5 Contact Form Multi versions prior to 1.2.1 Contact Form versions prior to 4.0.6 Contact Form to DB versions prior to 1.5.7 Custom Admin Page versions prior to 0.1.2 Custom Fiel...
Web Based TimeSheet Script SQL Injection
Exploit Title: Web Based TimeSheet Script - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://qualitypointtech.net/ Software Buy: http://www.qualitypointtech.com/webtimesheet/ Demo: http://qualitypointtech.net/timesheetdemo/index.php Version: N/A Tested on: Win7 x64,...
Web Based TimeSheet Script Authentication Bypass Vulnerability
web based timesheet is a program to monitor the work of your employees. An authentication bypass vulnerability exists in the Web Based TimeSheet script that requires the string 'or' '=' to be entered where the password is filled in, which can be exploited by an attacker to bypass authentication...
Web Based TimeSheet Script - Authentication Bypass
Exploit for php platform in category web applications Exploit Title: Web Based TimeSheet Script - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://qualitypointtech.net/ Software Buy: http://www.qualitypointtech.com/webtimesheet/ Demo:...
Web Based TimeSheet Script - Authentication Bypass
Web Based TimeSheet Script - Authentication Bypass Exploit Title: Web Based TimeSheet Script - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://qualitypointtech.net/ Software Buy: http://www.qualitypointtech.com/webtimesheet/ Demo:...
Web Based TimeSheet Script - Authentication Bypass
Exploit Title: Web Based TimeSheet Script - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://qualitypointtech.net/ Software Buy: http://www.qualitypointtech.com/webtimesheet/ Demo: http://qualitypointtech.net/timesheetdemo/index.php Version: N/A Tested on: Win7 x64,...
Microix Timesheet Module SQL Injection
Exploit Title: Microix timesheet module SQL Injection Google Dork: "Copyright by Microix" inurl:"/microixcloud/" Date: 2016-09-06 Software Link: http://www.microix.net/workflow-modules/timesheet-module/ Exploit Author: Anthony Cole Contact: http://twitter.com/acole76 Website:...
Microix Timesheet Module - SQL Injection Vulnerability
Exploit for asp platform in category web applications Exploit Title: Microix timesheet module SQL Injection Google Dork: "Copyright by Microix" inurl:"/microixcloud/" Date: 2016-09-06 Software Link: http://www.microix.net/workflow-modules/timesheet-module/ Exploit Author: Anthony Cole Contact:...
Microix Timesheet Module - SQL Injection
Exploit Title: Microix timesheet module SQL Injection Google Dork: "Copyright by Microix" inurl:"/microixcloud/" Date: 2016-09-06 Software Link: http://www.microix.net/workflow-modules/timesheet-module/ Exploit Author: Anthony Cole Contact: http://twitter.com/acole76 Website:...