Lucene search
+L

36 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:43 a.m.•21 views

CVE-2022-26627

Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file...

8.8CVSS8.5AI score0.01522EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:42 a.m.•22 views

CVE-2022-26295

A stored cross-site scripting XSS vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field...

5.4CVSS6AI score0.00583EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:41 a.m.•19 views

CVE-2022-26293

Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function saveemployee at /ptms/classes/Users.php...

9.8CVSS8.4AI score0.02198EPSS
SaveExploits2References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2022-30854

Malicious code in bioql PyPI...

9.8CVSS8.6AI score0.02198EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2022-30856

Malicious code in bioql PyPI...

5.4CVSS5.9AI score0.00583EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2021-33127

Malicious code in bioql PyPI...

9.8CVSS8.6AI score0.01254EPSS
SaveExploits1References1
NVD
NVD
•added 2022/04/07 3:15 p.m.•42 views

CVE-2022-26627

Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file...

8.8CVSS0.01522EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/04/07 3:15 p.m.•22 views

CVE-2022-26627

Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file...

8.8CVSS7.6AI score0.01522EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/04/07 3:15 p.m.•18 views

CVE-2022-26627

Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file...

8.8CVSS6.2AI score0.01522EPSS
SaveExploits1References2
CVE
CVE
•added 2022/04/07 2:24 p.m.•101 views

CVE-2022-26627

The CVE-2022-26627 entry concerns Online Project Time Management System v1.0, where an arbitrary file write vulnerability exists that enables an attacker to execute arbitrary code through a crafted HTML file. The connected Red Hat entry reiterates the same description, confirming that the flaw is...

8.8CVSS8.8AI score0.01522EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/07 12:00 a.m.•10 views

CVE-2022-26627: Unrestricted Upload of File with Dangerous Type

Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file...

8.8CVSS8.3AI score0.01522EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/04/07 12:00 a.m.•9 views

PT-2022-17961

Name of the Vulnerable Software and Affected Versions Online Project Time Management System version 1.0 Description The issue allows attackers to execute arbitrary code via a crafted HTML file, exploiting an arbitrary file write vulnerability. Recommendations For Online Project Time Management...

8.8CVSS6.6AI score0.01522EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2022/03/16 8:15 p.m.•12 views

CVE-2022-26295

A stored cross-site scripting XSS vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field...

5.4CVSS6AI score0.00583EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/03/16 8:15 p.m.•9 views

CVE-2022-26293

Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function saveemployee at /ptms/classes/Users.php...

9.8CVSS5.9AI score0.02198EPSS
SaveExploits2References5
osv_cve
osv_cve
•added 2022/03/16 8:15 p.m.•25 views

CVE-2022-26293

Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function saveemployee at /ptms/classes/Users.php...

9.8CVSS5.8AI score0.02198EPSS
SaveExploits2References4
Prion
Prion
•added 2022/03/16 8:15 p.m.•34 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field...

3.5CVSS5.2AI score0.00583EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/03/16 8:15 p.m.•26 views

Sql injection

Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function saveemployee at /ptms/classes/Users.php...

7.5CVSS9.7AI score0.02198EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2022/03/16 7:22 p.m.•50 views

CVE-2022-26295

A stored cross-site scripting XSS vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field...

5.4AI score0.00583EPSS
SaveExploits1References1
CVE
CVE
•added 2022/03/16 7:22 p.m.•113 views

CVE-2022-26293

CVE-2022-26293 affects Online Project Time Management System v1.0. The vulnerability is a SQL injection in the id parameter of the save_employee function in /ptms/classes/Users.php, allowing an attacker to manipulate SQL queries. Multiple connected sources confirm the issue and outline the vulner...

9.8CVSS9.8AI score0.02198EPSS
SaveExploits2References4Affected Software1
CNNVD
CNNVD
•added 2022/03/16 12:00 a.m.•23 views

Sourcecodester Online Project Time Management System SQL Injection Vulnerability

Online Project Time Management System is a web-based online project time management system that provides an online platform for a company's employees to report/record their assigned time or time spent on each project resubmission. online project time management system A SQL injection vulnerabilit...

9.8CVSS6.1AI score0.02198EPSS
SaveExploits2References5
Rows per page
Query Builder