CVE-2019-11559

A reflected Cross-site scripting XSS vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component...

CVE-2019-16416

HRworks 3.36.9 allows XSS via the purpose of a travel-expense report...

EUVD-2019-3230

Malware in sbrugna...

EUVD-2019-7157

Malware in sbrugna...

EUVD-2019-7158

Malware in sbrugna...

CVE-2019-16417

HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...

CVE-2019-16416

HRworks 3.36.9 allows XSS via the purpose of a travel-expense report...

CVE-2019-16417

HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...

CVE-2019-16417

HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...

CVE-2019-16416

HRworks 3.36.9 allows XSS via the purpose of a travel-expense report...

Design/Logic Flaw

HRworks 3.36.9 allows XSS via the purpose of a travel-expense report...

Design/Logic Flaw

HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...

CVE-2019-16417

HRworks FLOW 3.36.9 allows XSS via the purpose of a travel-expense report...

CVE-2019-16417

CVE-2019-16417 affects HRworks FLOW 3.36.9. The vulnerability is described as XSS via the purpose of a travel-expense report. The connected documents confirm the affected product/version and the nature of the issue, but do not provide a root-cause analysis, specific vulnerable parameter/file, or ...

CVE-2019-16416

HRworks 3.36.9 contains an XSS vulnerability exploitable via the purpose field of a travel-expense report. The issue is documented across multiple connected sources (e.g., Red Hat CVE entry, NVD) with the same description. The provided documents do not specify a patch/version fixed or exploit det...

CVE-2019-16416

HRworks 3.36.9 allows XSS via the purpose of a travel-expense report...

CVE-2019-11559

A reflected Cross-site scripting XSS vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component...

CVE-2019-11559

A reflected Cross-site scripting XSS vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component...

Cross site scripting

A reflected Cross-site scripting XSS vulnerability in HRworks V 1.16.1 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to the Login component...

CVE-2019-11559

HRworks v1.16.1 is affected by CVE-2019-11559, a reflected XSS in the Login component triggered by a crafted URL parameter. Exploitation details are not provided in the connected sources, but the Red Hat advisory and PT-Security entry confirm the reflection-based script injection as the issue. PT...