PT-2020-14106

Name of the Vulnerable Software and Affected Versions Kronos WebTA versions 3.8.x through 3.9.x Description A Blind SQL Injection issue affects the com.threeis.webta.H352premPayRequest servlet's SortBy parameter, allowing an attacker with the Employee, Supervisor, or Timekeeper role to read...

CVE-2020-14982: Improper Neutralization of Special Elements used in an SQL Command

A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 affecting the com.threeis.webta.H352premPayRequest servlet's SortBy parameter allows an attacker with the Employee, Supervisor, or Timekeeper role to read sensitive data from the database...