CVE-2010-4797

CVE-2010-4797 : Public records indicate multiple SQL injection vulnerabilities in the login form of Truworth Flex Timesheet . Attacks can exploit the Username or Password fields to execute arbitrary SQL commands remotely. The provided documents do not specify affected versions, root cause detail,...

PT-2011-1745

Name of the Vulnerable Software and Affected Versions Truworth Flex Timesheet affected versions not specified Description The issue concerns multiple SQL injection vulnerabilities in the log-in form. These vulnerabilities allow remote attackers to execute arbitrary SQL commands by manipulating th...

CVE-2010-4797: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password fields...