Approved changes feed: RSS · Atom
cpe:2.3:a:workforceroi:xpede:4.1:*:*:*:*:*:*:*part: a version: 4.1 update: *
| Vendor | Workforceroi (78fe7400-ee77-5e68-8dfa-1cecbbdf4dfc) |
|---|---|
| Product | Xpede (269ed4d1-9251-5da8-b870-e081fee6c2a8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2002-0584 |
vulnerable | 2026-06-08 04:46:21.753762 |
Details available
WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 for each new timesheet.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:56:38.279Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0583 |
vulnerable | 2026-06-08 04:46:21.753517 |
Details available
WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the reports via a brute force attack.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:56:38.686Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0582 |
vulnerable | 2026-06-08 04:46:21.753269 |
Details available
WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:56:37.843Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0581 |
vulnerable | 2026-06-08 04:46:21.753002 |
Details available
WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:56:38.292Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0580 |
vulnerable | 2026-06-08 04:46:21.752744 |
Details available
WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks.
Published: 2002-06-11T04:00:00.000Z
Updated: 2024-08-08T02:56:38.308Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0579 |
vulnerable | 2026-06-08 04:46:21.752463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0487 |
vulnerable | 2026-06-08 04:46:21.545950 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0486 |
vulnerable | 2026-06-08 04:46:21.544861 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.