CVE-2019-1010287

State: Published
Severity: Not scored
Published: Jul 17, 2019
Updated: Aug 5, 2024
Reserved: Mar 20, 2019

Description

Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the malicious url.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Timesheet Next GenTimesheet Next Gen	1.5.3 and earlierAffected

References

https://sourceforge.net/p/tsheetx/discussion/779083/thread/7fcb52f696/
https://sourceforge.net/p/tsheetx/code/497/tree/branches/legacy/login.php#l40

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.