188 matches found
PT-2022-5583
Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to insufficient neutralization of special elements in output, which can be exploited by a remote attacker to modify the logic of XQuery requests to the database by...
PT-2022-5575
Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to weaknesses in the error reporting mechanism of the software. It allows a remote attacker to exploit the vulnerability by passing an incorrect value in a parameter,...
PT-2022-5578
Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to weaknesses in the authorization procedure of the Websoft HCM software, which can be exploited by a remote attacker to gain unauthorized access to protected...
PT-2022-5577
Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the Websoft HCM software, allowing a remote attacker to conduct a cross-site scripting XSS attack. Recommendatio...
PT-2022-5590
Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to a lack of protection for service data in the Websoft HCM software, which can be exploited by a remote attacker to gain unauthorized access to protected information...
PT-2022-5595
Name of the Vulnerable Software and Affected Versions Websoft HCM affected versions not specified Description The issue is related to insufficient input validation in the Websoft HCM software, which can be exploited by a remote attacker to execute arbitrary code. Recommendations At the moment,...
test28.websoft.lv Cross Site Scripting vulnerability OBB-1457510
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...