EUVD-2008-4722

Malware in sbrugna...

TimeTrex Time 2.2 and Attendance Module - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/30789/info TimeTrex is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code ...

CVE-2008-4742

Multiple cross-site scripting XSS vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 password and 2 username parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 password and 2 username parameters...

CVE-2008-4742

CVE-2008-4742 describes multiple cross-site scripting (XSS) vulnerabilities in TimeTrex 2.2.11, specifically in interface/Login.php. The flaws allow remote attackers to inject arbitrary web script or HTML by manipulating the (1) password or (2) user_name parameters. The public records do not prov...

CVE-2008-4742

Multiple cross-site scripting XSS vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to inject arbitrary web script or HTML via the 1 password and 2 username parameters...

timetrex-xss.txt

HSC TimeTrex Time and Attendance Cookie Theft TimeTrex allows companies to track and monitor employee attendance accurately in real-time from anywhere in the world. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

TimeTrex Time 2.2 and Attendance Module - Multiple Cross-Site Scripting Vulnerabilities

TimeTrex Time 2.2 and Attendance Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30789/info TimeTrex is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may...

TimeTrex Time 2.2 and Attendance Module - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30789/info TimeTrex is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...