Workforceroi Xpede
8 CVEs affecting Workforceroi Xpede. Latest disclosed: 2002-08-12. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2002-0487 | | 2002-08-12 | Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to… | |
CVE-2002-0486 | | 2002-08-12 | Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain priv… | |
CVE-2002-0584 | | 2002-06-18 | WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily gues… | |
CVE-2002-0583 | | 2002-06-18 | WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allo… | |
CVE-2002-0582 | | 2002-06-18 | WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read… | |
CVE-2002-0581 | | 2002-06-18 | WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter… | |
CVE-2002-0580 | | 2002-06-18 | WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows t… | |
CVE-2002-0579 | | 2002-06-18 | WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which… |