Skip to content
OpenAdvisories

Product · Timeclock

PHP Timeclock

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    PHP Timeclock 1.04 Multiple Cross-Site Scripting via Parameters

    PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow unauthenticated attackers to inject arbitrary JavaScript by manipulating URL paths and POST parameters. Attackers can append malicious payloads to login.php, timeclock.php, a…