Timesheet Next Gen 漏洞列表

Timesheet Next Gen 1.5.3 and earlier is vulnerable to cross-site scripting that allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the malicious url.

Timesheet Next Gen 1.5.3 and earlier is vulnerable to cross-site scripting that allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the malicious url.

Timesheet Next Gen1.5.3及更早版本易受跨站点脚本攻击，攻击者可以通过“重定向”参数执行任意HTML和JavaScript代码。组件是：Web登录表单：login.php，第40行和第54行。攻击向量是：反射XSS，受害者可能单击恶意url