CVE-2022-26295

A stored cross-site scripting XSS vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field...

CVE-2022-26295

CVE-2022-26295 is a stored XSS vulnerability in Online Project Time Management System v1.0, exploitable via /ptms/?page=user by injecting payload into the user name field. The core issue is lack of input validation/filtering and unsafe output handling for user-supplied data. Multiple connected so...

CVE-2022-26293: Improper Neutralization of Special Elements used in an SQL Command

Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function saveemployee at /ptms/classes/Users.php...

PT-2022-17771

Name of the Vulnerable Software and Affected Versions Online Project Time Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter in the save employee function at the /ptms/classes/Users.php API...

PT-2022-17772

Name of the Vulnerable Software and Affected Versions Online Project Time Management System version 1.0 Description A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field in the "/ptms/?page=user" A...

CVE-2022-26295: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field...