SQL Injection Vulnerability in Online Attendance Management System Lite Version of Xiamen OneFinger Intelligent Technology Co.

Xiamen One Finger Intelligent Technology Co., Ltd. is a "double-soft" and "high-tech" enterprise integrating R&D, manufacturing, sales and service. A SQL injection vulnerability exists in the lite version of Xiamen OneFinger Intelligent Technology Co., Ltd's online attendance management system,...

SQL Injection Vulnerability in Hanvon Face Attendance Management System

Ltd. was founded in 1998. As a pioneer in the domestic artificial intelligence industry, Hanvon Technology has been dedicated to the research and application of intelligent interaction technology in multiple fields for more than 20 years. A SQL injection vulnerability exists in Hanvon's Face...

SQL Injection Vulnerability in Attendance Management System of Guangzhou Kemi Intelligent Technology Co.

Kemi Group is a group enterprise with a history of 25 years. Kemi Group has a number of product divisions such as smart locks, system integration, banknote counting machines, cash registers, shredders, mobile office platforms, Kemi Technology, Kemi commercial machinery, Kemi Chemicals, Kemi...

Unauthorized Access Vulnerability in ZKNet Attendance Management System of Beijing Zhongguancun Technology Development Co.

ZKNet Attendance Management System is a cloud service management platform for enterprises, governmental organizations and other industry sectors. Ltd. ZKNet Attendance Management System suffers from an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in i.Timex Attendance Management System

i.Timex is a time and attendance management system designed for a wide range of small and large businesses. A SQL injection vulnerability exists in i.Timex Attendance Management System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Dr.ID Access Control and Time Attendance System of ZTE Security Co.

Dr.ID Access Control & Time Attendance System is a system of ZTE Security Co. Dr.ID Access Control & Attendance System of ZTE Security Co. Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-3934

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...

CVE-2020-3934

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...

CVE-2020-3933

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, allows attackers to enumerate and exam user account in the system...

Default credentials

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, stores users’ information by cleartext in the cookie, which divulges password to attackers...

Sql injection

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...

CVE-2020-3935

CVE-2020-3935 concerns Taiwan SECOM’s Door Access Control and Personnel Attendance Management system, where user information is stored in cleartext in cookies, exposing passwords to attackers. The NVD and related records assign a CVSSv3.1 base score of 7.5 (HIGH) with NETWORK attack vector and no...

CVE-2020-3933 TAIWAN SECOM CO., LTD. - User Account Enumeration

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, allows attackers to enumerate and exam user account in the system...

CVE-2020-3934

CVE-2020-3934: A pre-auth SQL injection vulnerability affects a Taiwan Secom door access and personnel attendance management system. Connected sources indicate an unauthenticated attack could inject SQL commands, with high-severity impact per CVSS-3.1 (CRITICAL, 9.8) and CVSS-2 (BASE 7.5) metrics...

CVE-2020-3933

CVE-2020-3933 concerns a Taiwan SECOM door access/attendance system where attackers can enumerate user accounts. The provided data from NVD (CVSS: v3.1) indicates a network-based, low-complexity issue with no authentication required, resulting in partial confidentiality impact (C:L) and no impact...

CVE-2020-3934 TAIWAN SECOM CO., LTD. - Pre-auth SQL Injection

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...

CVE-2020-8494

In Kronos Web Time and Attendance webTA 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeeper, Master Timekeeper, or HR Admin privileges to gain unauthorized administrative privileges within the application via the empid, userid, pw...

Cross site scripting

A stored XSS vulnerability in Kronos Web Time and Attendance webTA affects 3.8.x and later 3.x versions before 4.0 via multiple input fields Login Message, Banner Message, and Password Instructions of the com.threeis.webta.H261configMenu servlet via an authenticated administrator...

Cross site scripting

In Kronos Web Time and Attendance webTA 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the Application Banner input field of the /ApplicationBanner page as an authenticated administrator...

CVE-2020-8495

In Kronos Web Time and Attendance webTA 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an attacker with Timekeeper or Supervisor privileges to gain unauthorized administrative privileges within the application via the delegate, delegateRole, and...