Threats tagged 'ghsa-2px2-fw9j-wxf7'

A vulnerability in Times Software E-Payroll allows an unauthenticated attacker to perform denial-of-service (DoS) attacks due to improper sanitization of a POST parameter during login. SQL injection attacks may also be possible, but attempts to exploit this have been hindered by backend filtering. Command injection attempts reveal detailed error messages that disclose internal infrastructure information. The patch status is unknown as the vendor has not responded to inquiries.