Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2022-26627
Disclosure Date: April 07, 2022 (last updated October 07, 2023)
Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file.
0
Attacker Value
Unknown
CVE-2022-26295
Disclosure Date: March 16, 2022 (last updated October 07, 2023)
A stored cross-site scripting (XSS) vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user name field.
0
Attacker Value
Unknown
CVE-2022-26293
Disclosure Date: March 16, 2022 (last updated October 07, 2023)
Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function save_employee at /ptms/classes/Users.php.
0
Attacker Value
Unknown
CVE-2021-46451
Disclosure Date: January 24, 2022 (last updated October 07, 2023)
An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter in the load_file function.
0
