CVE-2020-8493

Mô tả

Tham khảo

• packetstormsecurity.com/files/156215/Kronos-WebTA-4.0-Privilege-Escalation-Cross-Site-Scripting.html · Exploit
• nolanbkennedy.com/post/stored-xss-in-kronos-web-time-and-attendance-webta · Exploit
• kronos.com/products/kronos-webta · Product

Lỗ hổng khác của web time and attendance

• CVE-2020-35604NGHIÊM TRỌNG 9.8An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is used.
• CVE-2020-14982TRUNG BÌNH 6.5A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com.threeis.webta.H352premPayRequest servlet's…
• CVE-2020-8496TRUNG BÌNH 4.8In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the Applic…
• CVE-2020-8495CAO 7.5In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an atta…
• CVE-2020-8494CAO 8.8In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an atta…