Vendors / Ultrize Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Ultrize records in CISA KEV No Ultrize vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 33
PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config[include_dir] pa…
CVSS 2.0 MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01689 · Published 2009-08-14 · No fix listed CWE-94
Priority LOW 28
Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to read arbitrary files via a ..
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02727 · Published 2009-09-10 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
Critical0 High2 Medium2 Low0 No CVSS0