868 matches found
CVE-2017-17995
Biometric Shift Employee Management System has XSS via the LastName parameter in an index.php?user=ajax request...
CVE-2017-17991
Biometric Shift Employee Management System has XSS via the expensename parameter in an index.php?user=expenses request...
CVE-2017-17993
Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...
CVE-2017-17993
Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...
CVE-2017-17990
Biometric Shift Employee Management System has CSRF via index.php in an editholiday action...
Design/Logic Flaw
Biometric Shift Employee Management System has CSRF via index.php in an editholiday action...
Server side request forgery (ssrf)
Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competencycriteria request...
Cross site request forgery (csrf)
Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...
CVE-2017-17992
Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php formfilename parameter in a downloadform action...
CVE-2017-17992
Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php formfilename parameter in a downloadform action...
CVE-2017-17989
Biometric Shift Employee Management System has XSS via the index.php holidayname parameter in an editholiday action...
CVE-2017-17994
Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competencycriteria request...
Server side request forgery (ssrf)
Biometric Shift Employee Management System has XSS via the LastName parameter in an index.php?user=ajax request...
CVE-2017-17992
Biometric Shift Employee Management System is affected by CVE-2017-17992 due to a directory traversal vulnerability in the download_form action. The root cause is lack of validation in the index.php form_file_name parameter, enabling arbitrary file download. Public records note network exposure w...
CVE-2017-17993
Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...
CVE-2017-17990
Biometric Shift Employee Management System has CSRF via index.php in an editholiday action...
CVE-2017-17992
Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php formfilename parameter in a downloadform action...
CVE-2017-17989
Biometric Shift Employee Management System has XSS via the index.php holidayname parameter in an editholiday action...
CVE-2017-17991
CVE-2017-17991 affects Biometric Shift Employee Management System, with a stored/reflected XSS in the expense_name parameter of the index.php?user=expenses request. Documents confirm XSS vulnerability but do not provide exploit details, affected versions, or remediation steps.