Icon Time Systems RTC-1000 Cross-Site Scripting Vulnerability

The Icon Time Systems RTC-1000 is an electronic clock product from Icon Time Systems, USA. A cross-site scripting vulnerability exists in Icon Time Systems RTC-1000 version 2.5.7458 and earlier. A remote attacker can exploit this vulnerability to inject arbitrary JavaScript code into the nameFirs...

Cross site scripting

A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst aka First Name field for the employee details page /employee.html that is then reflected in multiple pages where...

CVE-2017-16819

A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFirst aka First Name field for the employee details page /employee.html that is then reflected in multiple pages where...