CVE-2010-0122

概要

参考情報

• secunia.com/advisories/38739 · Vendor Advisory
• secunia.com/secunia_research/2010-11 · Vendor Advisory
• osvdb.org/62831
• osvdb.org/62832
• securityfocus.com/archive/1/509995/100/0/threaded
• securityfocus.com/bid/38639
• exchange.xforce.ibmcloud.com/vulnerabilities/56799

employee timeclock software のその他の脆弱性

• CVE-2010-0124低 2.1Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive in…
• CVE-2010-0123中 5.0The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient acc…
• CVE-2010-0707中 6.8Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the au…