CVE-2017-14680

Description

References

• seclists.org/bugtraq/2017/Sep/20 · Exploit
• seclists.org/fulldisclosure/2017/Sep/39 · Exploit

Weitere Schwachstellen in zktime web

• CVE-2017-17057MITTEL 6.1There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280. The vulnerability exists due to insufficient filtration of user-supplied d…
• CVE-2017-17056HOCH 8.8The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a 'password_change()' f…
• CVE-2017-13129HOCH 8.0Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hijack the authenticat…