Lucene search
+L

87 matches found

Cvelist
Cvelist
added 2024/12/11 11:31 p.m.72 views

CVE-2024-12497 1000 Projects Attendance Tracking Management System check_admin_login.php sql injection

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

7.5CVSS0.00825EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/12/11 11:31 p.m.15 views

CVE-2024-12497 1000 Projects Attendance Tracking Management System check_admin_login.php sql injection

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

7.5CVSS7.4AI score0.00825EPSS
SaveExploits1References5
CNVD
CNVD
added 2017/02/27 12:00 a.m.4 views

Joomla! Intranet Component Attendance Track SQL Injection Vulnerability

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A SQL injection vulnerability exists in the attendance track of the Joomla! Intranet component. An attacker can exploit the vulnerability to access or modify database data...

7.9AI score
SaveExploits0References1
NVD
NVD
added 2014/05/22 8:55 p.m.19 views

CVE-2014-2938

Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands...

8.3CVSS6.7AI score0.01601EPSS
SaveExploits0References1
Prion
Prion
added 2014/05/22 8:55 p.m.21 views

Authentication flaw

Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands...

8.3CVSS7.2AI score0.01601EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
added 2014/05/22 8:00 p.m.30 views

CVE-2014-2938

Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands...

6.7AI score0.01601EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2008/08/22 12:00 a.m.27 views

timetrex-xss.txt

HSC TimeTrex Time and Attendance Cookie Theft TimeTrex allows companies to track and monitor employee attendance accurately in real-time from anywhere in the world. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

7.4AI score
SaveExploits0
Rows per page
Query Builder