Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2021/10/18 9:10 p.m.•35 views

CVE-2021-41156 Reflected XSS vulnerability

anuko/timetracker is an, open source time tracking system. In affected versions Time Tracker uses browsertoday hidden control on a few pages to collect the today's date from user browsers. Because of not checking this parameter for sanity in versions prior to 1.19.30.5601, it was possible to craf...

6.8CVSS6.9AI score0.00494EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/18 12:00 a.m.•3 views

CVE-2021-41156: Improper Neutralization of Input During Web Page Generation

anuko/timetracker is an, open source time tracking system. In affected versions Time Tracker uses browsertoday hidden control on a few pages to collect the today's date from user browsers. Because of not checking this parameter for sanity in versions prior to 1.19.30.5601, it was possible to craf...

6.8CVSS5.9AI score0.00494EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/10/18 12:00 a.m.•13 views

Anuko TimeTracker 跨站脚本漏洞

Anuko TimeTracker is Anuko an open source application . Provides a Web-based open source time tracking application written in PHP. A cross-site scripting vulnerability exists in anuko timetracker that stems from the time tracker using the browsertoday hidden control on several pages to collect...

6.8CVSS5.5AI score0.00494EPSS
SaveExploits0References2
Rows per page
Query Builder