The vulnerability of the CrocoTime employee attendance system, related to uncontrolled resource consumption, allows a violator to trigger a service failure.

The vulnerability of the CrocoTime employee attendance system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the CrocoTime employee attendance system, related to deficiencies in the authorization process, allows a violator to gain unauthorized access to protected information.

The vulnerability of the CrocoTime employee time management system is related to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-37749

CVE-2026-37749 — CodeAstro Simple Attendance Management System 1.0 - SQLインジェクション 詳細 フィールド| 情報 ---|--- CVE ID| CVE-2026-37749 タイプ| SQLインジェクション → 認証バイパス 深刻度| Critical CVSSv3: 9.8 ベンダー| CodeAstro 製品| Simple Attendance Management System バージョン| 1.0 発見者| Varad AP Mene 日付| 2026-04-16 CWE| CWE-89 説明...

CVE-2023-51802

CVE-2023-51802 Simple Student Attendance System v.1.0 - 출석 보고서의 크로스사이트 스크립팅XSS 취약점 설명 : Simple Student Attendance System v.1.0의 크로스사이트 스크립팅 취약점으로 인해 원격 공격자가 출석 보고서 컴포넌트의 "page" 또는 "classmonth" 매개변수에 조작된 페이로드를 전달하여 임의 코드를 실행할 수 있습니다. 취약한 제품 버전 : Simple Student Attendance System v.1.0 CVE 작성자 :...

CVE-2023-51801

CVE-2023-51801 Simple Student Attendance System v.1.0 - 다중 SQL 인젝션 취약점 - studentform.php 및 classform.php 설명 : Simple Student Attendance System v.1.0은 인증된 공격자가 악용할 수 있는 다중 SQL 인젝션 취약점에 취약합니다. 이러한 취약점은 studentform.php 및 classform.php에 존재하며, 'id' 매개변수를 통해 임의의 SQL 명령을 실행할 수 있습니다. 취약한 제품 버전 : Simple...

CVE-2024-39250

CVE-2024-39250 PoC nuclei 템플릿 Efrotech http://www.efrotech.com/의 TimeTrax https://etimetrax.com/는 인사 출석 추적 프로그램이며, 인증되지 않은 SQL 인젝션 취약점을 발견했습니다. 공격 벡터를 실행하기 쉬워서 nuclei 템플릿을 만들었습니다...

CVE-2025-25621

CVE-2025-25621 Unifiedtransform v2.0은 부적절한 접근 제어 취약점이 존재하여, 교사가 /courses/teacher/index?teacherid=2&semesterid=1 엔드포인트를 통해 동료 교사의 출석을 체크할 수 있습니다. 공급업체: Unifiedtransform PoC Step 1: 교사로 애플리케이션에 로그인합니다. Step 2: 엔드포인트 /courses/teacher/index?teacherid=2&semesterid=1로 이동합니다 Teacher ID 변경 가능. Step 3: "출...

CVE-2025-25615

CVE-2025-25615 Unifiedtransform v2.0에는 부적절한 접근 제어Incorrect Access Control 취약점이 존재하며, 이를 통해 교사가 모든 학급 섹션의 출석부를 볼 수 있습니다. 공급업체: Unifiedtransform PoC 1단계: 교사Teacher 계정으로 애플리케이션에 로그인합니다. 2단계: 다음 엔드포인트로 이동합니다: /attendances/view?classid=1&sectionid=2&courseid=1 classid 및 sectionid 매개변수를 수정하여 다른 섹션에 접근할...

CVE-2026-100564

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

CVE-2026-100564

Versions of OpenClaw before 2026.8.1 are vulnerable to CSV Formula Injection . The root cause is a failure to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with the permissions of the spre...

CVE-2026-100564 OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

CVE-2026-100564 OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

EUVD-2026-87486

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

CVE-2026-100564 OpenClaw before 2026.8.1 CSV Formula Injection via Attendance Export

OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula characters in participant display names within attendance CSV exports. Attackers can inject formula-like cells that execute with spreadsheet user permissions when the export is opened in formula-enabled applications...

PT-2026-99201

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description The software fails to neutralize spreadsheet formula characters in participant display names during attendance CSV exports. This allows attackers to inject formula-like cells that execute with th...

EUVD-2026-87371

Horilla is an HR and CRM software. Prior to 2.0.0, approvevalidateattendancerequest at /attendance/approve-validate-attendance-request/ changes attendancevalidated, isvalidaterequestapproved, approvedby, and related pending-request state through an HTTP GET before calling attendance.save, so Djan...

CVE-2026-86066 Horilla attendance approval endpoint is vulnerable to cross-site request forgery

Horilla is an HR and CRM software. Prior to 2.0.0, approvevalidateattendancerequest at /attendance/approve-validate-attendance-request/ changes attendancevalidated, isvalidaterequestapproved, approvedby, and related pending-request state through an HTTP GET before calling attendance.save, so Djan...

CVE-2026-86066 Horilla attendance approval endpoint is vulnerable to cross-site request forgery

Horilla is an HR and CRM software. Prior to 2.0.0, approvevalidateattendancerequest at /attendance/approve-validate-attendance-request/ changes attendancevalidated, isvalidaterequestapproved, approvedby, and related pending-request state through an HTTP GET before calling attendance.save, so Djan...

PT-2026-99138

Name of the Vulnerable Software and Affected Versions Horilla versions prior to 2.0.0 Description An issue exists where the endpoint '/attendance/approve-validate-attendance-request/' modifies attendance validated, is validate request approved, approved by, and pending-request states via an HTTP...

CVE-2026-95957

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file studentsignup.php of the component Self-Registration. Performing a manipulation of the argument fullname results in cross site scripting. Remote...