22 matches found
CVE-2022-26627
Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file...
CVE-2022-26295
A stored cross-site scripting XSS vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field...
CVE-2022-26293
Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function saveemployee at /ptms/classes/Users.php...
EUVD-2022-30856
Malicious code in bioql PyPI...
EUVD-2022-30854
Malicious code in bioql PyPI...
CVE-2022-26627
The CVE-2022-26627 entry concerns Online Project Time Management System v1.0, where an arbitrary file write vulnerability exists that enables an attacker to execute arbitrary code through a crafted HTML file. The connected Red Hat entry reiterates the same description, confirming that the flaw is...
PT-2022-17961
Name of the Vulnerable Software and Affected Versions Online Project Time Management System version 1.0 Description The issue allows attackers to execute arbitrary code via a crafted HTML file, exploiting an arbitrary file write vulnerability. Recommendations For Online Project Time Management...
CVE-2022-26627: Unrestricted Upload of File with Dangerous Type
Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file...
Sql injection
Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function saveemployee at /ptms/classes/Users.php...
Cross site scripting
A stored cross-site scripting XSS vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field...
CVE-2022-26295
A stored cross-site scripting XSS vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field...
CVE-2022-26293
CVE-2022-26293 affects Online Project Time Management System v1.0. The vulnerability is a SQL injection in the id parameter of the save_employee function in /ptms/classes/Users.php, allowing an attacker to manipulate SQL queries. Multiple connected sources confirm the issue and outline the vulner...
CVE-2022-26293: Improper Neutralization of Special Elements used in an SQL Command
Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function saveemployee at /ptms/classes/Users.php...
PT-2022-17772
Name of the Vulnerable Software and Affected Versions Online Project Time Management System version 1.0 Description A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field in the "/ptms/?page=user" A...
CVE-2022-26295: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field...
PT-2022-17771
Name of the Vulnerable Software and Affected Versions Online Project Time Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter in the save employee function at the /ptms/classes/Users.php API...
Online Project Time Management System 1.0 - SQLi (Authenticated)
Exploit Title: Online Project Time Management System 1.0 - SQLi Authenticated Date: 19/01/2022 Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
Online Project Time Management System 1.0 - Multiple Stored Cross Site Scripting Vulnerabilities
Exploit Title: Online Project Time Management System 1.0 - Multiple Stored XSS Authenticated Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.sourcecodester.com/ Software Link:...
