Approved changes feed: RSS · Atom

cpe:2.3:a:iwcnetwork:biometric_shift_employee_management_system:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

VendorIwcnetwork (955233df-f355-599c-a0dc-9b22f062f660)
ProductBiometric Shift Employee Management System (aff0c3c6-0d65-5f8a-b2d9-d7df852ed854)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-17995 vulnerable 2026-06-08 05:09:10.150525 Details available
Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request.
Published: 2017-12-30T04:00:00.000Z
Updated: 2024-08-05T21:06:49.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17994 vulnerable 2026-06-08 05:09:10.150254 Details available
Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria request.
Published: 2017-12-30T04:00:00.000Z
Updated: 2024-08-05T21:06:49.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17993 vulnerable 2026-06-08 05:09:10.149977 Details available
Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction request.
Published: 2017-12-30T04:00:00.000Z
Updated: 2024-08-05T21:06:49.972Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17992 vulnerable 2026-06-08 05:09:10.149713 Details available
Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name parameter in a download_form action.
Published: 2017-12-30T04:00:00.000Z
Updated: 2024-08-05T21:06:49.949Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17991 vulnerable 2026-06-08 05:09:10.149433 Details available
Biometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request.
Published: 2017-12-30T04:00:00.000Z
Updated: 2024-08-05T21:06:49.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17990 vulnerable 2026-06-08 05:09:10.149127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17989 vulnerable 2026-06-08 05:09:10.148735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.