Icon Time Systems RTC-1000 Cross-Site Scripting Vulnerability

The Icon Time Systems RTC-1000 is an electronic clock product from Icon Time Systems, USA. A cross-site scripting vulnerability exists in Icon Time Systems RTC-1000 version 2.5.7458 and earlier. A remote attacker can exploit this vulnerability to inject arbitrary JavaScript code into the nameFirs...

Cross site scripting

A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst aka First Name field for the employee details page /employee.html that is then reflected in multiple pages where...

CVE-2017-16819

A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst aka First Name field for the employee details page /employee.html that is then reflected in multiple pages where...

PT-2017-14580

Name of the Vulnerable Software and Affected Versions Icon Time Systems RTC-1000 versions 2.5.7458 and earlier Description A stored cross-site scripting issue allows remote attackers to inject arbitrary JavaScript in the nameFirst field for the employee details page "/employee.html" that is then...

CVE-2017-16819: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst aka First Name field for the employee details page /employee.html that is then reflected in multiple pages where...