5 matches found
Sql injection
An issue was discovered in LATRIX 0.6.0. SQL injection in the txtaccesscode parameter of inandout.php leads to information disclosure and code execution...
CVE-2021-30000: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in LATRIX 0.6.0. SQL injection in the txtaccesscode parameter of inandout.php leads to information disclosure and code execution...
SOURCEFORGE Organization: SourceForge LATRIX SQL Injection Vulnerability
SOURCEFORGE LATRIX is an open source application from the SOURCEFORGE organization. It provides presence and attendance records, attendance tracking, paperless leave requests with freely definable leave types, downtime, fire registration and extensive reporting options. LATRIX version 0.6.0 suffe...
PT-2021-18564
Name of the Vulnerable Software and Affected Versions LATRIX version 0.6.0 Description An issue was discovered that leads to SQL injection in the txtaccesscode parameter of "inandout.php", resulting in information disclosure and code execution. Recommendations For LATRIX version 0.6.0, consider...