PT-2022-5582

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to errors in the session identifier generation mechanism. It may allow a remote attacker to elevate their privileges. Recommendations At the moment, there is no...

PT-2022-5579

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to the lack of the "Secure" attribute in session authorization cookies, which can be exploited by a remote attacker to intercept HTTP network traffic and obtain a...

PT-2022-5576

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to a lack of protection for service data in the Websoft HCM software, which can be exploited by a remote attacker to obtain identifier information. This information c...

PT-2022-5590

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to a lack of protection for service data in the Websoft HCM software, which can be exploited by a remote attacker to gain unauthorized access to protected information...

PT-2022-5594

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to incorrect code generation management in the Websoft HCM software. It allows a remote attacker to execute arbitrary code when forming an HTTP request. Recommendatio...

PT-2022-5595

Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to insufficient input validation in the Websoft HCM software, which can be exploited by a remote attacker to execute arbitrary code. Recommendations At the moment,...

test28.websoft.lv Cross Site Scripting vulnerability OBB-1457510

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Websoft ourpeople.php parameter id SQL injection vulnerability

No description provided by source...