Lucene search
+L

7 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/29 12:00 a.m.•8 views

CVE-2024-9319: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Online Timesheet App 1.0. This affects an unknown part of the file /endpoint/delete-timesheet.php. The manipulation of the argument timesheet leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS6.4AI score0.00532EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/14 12:00 a.m.•7 views

CVE-2009-2769: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configincludedir parameter...

6.8CVSS6.4AI score0.01689EPSS
SaveExploits1References2
Exploit DB
Exploit DB
•added 2009/07/28 12:00 a.m.•41 views

ultrize timesheet 1.2.2 - Remote File Inclusion

===================================================================================== o Ultrize TimeSheet 1.2.2 Remote File Inclusion Vulnerability Software : Ultrize TimeSheet version 1.2.2 Vendor : http://www.ultrize.com/ Download : http://www.ultrize.com/timesheet/download/timeSheet-20080505.z...

6.8CVSS5.8AI score0.01689EPSS
SaveExploits1
NVD
NVD
•added 2006/09/12 4:07 p.m.•21 views

CVE-2006-4705

SQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet aka Timesheet.php 1.2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

5CVSS8.4AI score0.01273EPSS
SaveExploits0References6
CVE
CVE
•added 2006/09/12 4:00 p.m.•64 views

CVE-2006-4705

SQL injection vulnerability in login.php of Timesheet (aka Timesheet.php) 1.2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter. This affects Timesheet 1.2.1 as reported by CVE records. The connected documents specify the vulnerability and payload vector but d...

5CVSS8.8AI score0.01273EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2006/09/12 4:00 p.m.•33 views

CVE-2006-4705

SQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet aka Timesheet.php 1.2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

8.4AI score0.01273EPSS
SaveExploits0References6
securityvulns
securityvulns
•added 2006/09/09 12:00 a.m.•59 views

Timesheet 1.2.1 Blind SQL Injection Vulnerability

About: Timesheet.php is a PHP application designed to keep track of the hours worked by multiple people on multiple projects. It allows users to log in through their web browser and manage the times that they are clocked on or clocked off. Description: A vulnerability can be found on the file...

0.5AI score
SaveExploits0
Rows per page
Query Builder