CVE-2020-15255

概要

参考情報

• packetstormsecurity.com/files/159996/Anuko-Time-Tracker-1.19.23.5325-CSV-Injection.html · Exploit
• anuko/timetracker commit d947290 · Patch
• anuko/timetracker security advisory · Third Party Advisory
• exploit-db.com/exploits/49027 · Exploit

time tracker のその他の脆弱性

• CVE-2023-32308緊急 9.8anuko timetracker is an open source time tracking system. Boolean-based blind SQL injection vulnerability existed in Time Tracker invoices.p…
• CVE-2023-32306緊急 9.8Time Tracker is an open source time tracking system. A time-based blind injection vulnerability existed in Time Tracker reports in versions …
• CVE-2023-32066中 5.4Time Tracker is an open source time tracking system. The week view plugin in Time Tracker versions 1.22.11.5782 and prior was not escaping t…
• CVE-2022-24708中 5.4Anuko Time Tracker is an open source, web-based time tracking application written in PHP. ttUser.class.php in Time Tracker versions prior to…
• CVE-2022-24707高 8.8Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection…