Export limit exceeded: 425880 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2009-2769

PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config[include_dir] parameter.

CVSS 2.0 · 6.8 Medium EPSS 1.7% KEV · Not listed
Vendors
Ultrize
Products
Timesheet
CVE-2009-3151

Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Ultrize
Products
Timesheet