Vulnerabilities (CVE)

Filtered by vendor Iwcnetwork Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-17876 1 Iwcnetwork 1 Shift 2018-01-10 5.0 MEDIUM 7.5 HIGH
Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter.
CVE-2017-17990 1 Iwcnetwork 1 Biometric Shift Employee Management System 2018-01-09 6.8 MEDIUM 8.8 HIGH
Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.