Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Multiple Time Sheets (MTS) 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the tab parameter to (1) index.php, as demonstrated using mixed case and encoded whitespace characters in the tag; or (2) clientinfo.php, (3) invoices.php, (4) smartlinks.php, and (5) todo.php, as demonstrated using a META tag.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Multiple Time Sheets ’index.php’多个输入验证错误漏洞
Vulnerability Description
Multiple Time Sheets (MTS) 5.0以及之前的版本存在跨站脚本攻击漏洞。远程攻击者借助tab参数，注入任意的web脚本或HTML。该tab参数是对(1)index.php, 比如在tag中使用混合事件和编码过的不可打印字符字符，(2)clientinfo.php,(3)invoices.php,(4)smartlinks.php,和(5)todo.php(比如使用一个META tag)的参数。
CVSS Information
N/A
Vulnerability Type
N/A