Online Project Time Management System Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Online Project Time Management System Project records in CISA KEV

No Online Project Time Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Project Time Management System 4 records MEDIUM

Records

4 records

TI-2022-09680 CVE-2022-26293 · GHSA-7qpf-fc32-w73f

Online Project Time Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 46

Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function save_employee at /ptms/classes/Users.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02216 Published 2022-03-16 No fix listed CWE-89

TI-2021-21242 CVE-2021-46451 · GHSA-jrc6-w967-jvc8

An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management…

MEDIUM 45

An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter in the load_file function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01254 Published 2022-01-24 No fix listed CWE-89

TI-2022-09904 CVE-2022-26627 · GHSA-vjgw-cc8r-582j

Online Project Time Management System v1.0 was discovered to contain an arbitrary file…

MEDIUM 41

Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01522 Published 2022-04-07 No fix listed CWE-434

TI-2022-09681 CVE-2022-26295 · GHSA-6px3-hx99-f2qp

A stored cross-site scripting (XSS) vulnerability in /ptms/?page=user of Online Project…

LOW 25

A stored cross-site scripting (XSS) vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user n…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00583 Published 2022-03-16 No fix listed CWE-79

Open these records in search →

Critical	2
High	1
Medium	1
Low	0
No CVSS	0