13 matches found
CVE-2024-39250
CVE-2024-39250 PoC nuclei template Efrotech's http://www.efrotech.com/ TimeTrax https://etimetrax.com/ is a Human Resources attendance tracking program, and I found an unauthenticated SQL Injection vulnerability. It is easy to execute the attack vector, so I created a nuclei template...
EfroTech Timetrax v8.3 - Sql Injection
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface. id: CVE-2024-39250 info: name: EfroTech Timetrax v8.3 - Sql Injection author: s4e-io,efran severity: high description: | EfroTech Timetrax v8.3 was...
CVE-2025-46157
CVE-2025-46157 CVE-2025-46157 – Timetrax V1 2025 远程代码执行与权限提升 摘要 在 Timetrax V1 2025 中发现了一个严重漏洞，允许经过身份验证的用户绕过文件上传限制并实现远程代码执行 RCE 。该问题存在于考勤模块的请假申请表单 中，由于服务器端验证薄弱，攻击者可以通过修改请求上传恶意的 .asp Web Shell。 进一步利用可通过滥用 SeImpersonatePrivilege 使用 EfsPotato 技术实现权限提升至 SYSTEM 。 漏洞详情 ✅ 远程代码执行 RCE 组件： 考勤模块中的请假申请表单 原因：...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
Exploit for Unrestricted Upload of File with Dangerous Type in Efrotech Timetrax
CVE-2025-46157 CVE-2025-46157 – Timetrax V1 2025 Remote Co...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
PT-2024-28411 · Efrotech · Efrotech Timetrax
Name of the Vulnerable Software and Affected Versions: EfroTech Timetrax version 8.3 Description: The issue is related to an unauthenticated SQL injection vulnerability. This vulnerability can be exploited via the q parameter in the search web interface. Recommendations: For EfroTech Timetrax...
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface...
CVE-2024-39250
EfroTech Timetrax v8.3 is affected by an unauthenticated SQL injection via the q parameter in the search web interface. The issue, detailed in the CVE-2024-39250/Nuclei template, allows unauthenticated attackers to perform SQL injection against the Timetrax database. The vulnerability is associat...
EfroTech Timetrax 安全漏洞
EfroTech Timetrax is a human resource management program from EfroTech. A security vulnerability exists in EfroTech Timetrax version 8.3, which stems from an unauthenticated SQL injection vulnerability in the q parameter in the search web interface...
