Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 for each new timesheet.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WorkforceROI XPede任意时间表泄露漏洞
Vulnerability Description
XPede是一款基于WEB的项目审核软件，可运行在Microsoft Windows操作系统下。 XPede对用户缺少充分正确的授权检查，可导致远程攻击者获得其他用户时间表信息。 由于XPede中的'ets_app_process.asp'脚本对授权信息缺少充分正确的检查，可导致攻击者访问其他用户时间表，获得其他用户时间表信息。 此问题存在于XPede 4.1版本中，其他版本也可能存在此漏洞。
CVSS Information
N/A
Vulnerability Type
N/A