CVE-2010-4797 | BDVDB-2026-45926 Detail

Description#

Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/62374
http://securityreason.com/securityalert/8222
http://secunia.com/advisories/41763
http://www.exploit-db.com/exploits/15220
http://www.securityfocus.com/bid/43886
http://packetstormsecurity.org/1010-exploits/flextimesheet-sql.txt

Exploit#

http://www.exploit-db.com/exploits/15220

History#

Version 12011-04-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.