Approved changes feed: RSS · Atom

cpe:2.3:a:ultrize:timesheet:1.2.2:*:*:*:*:*:*:*

part: a version: 1.2.2 update: *

VendorUltrize (a8aff243-1866-5733-a5be-3089af1177a9)
ProductTimesheet (3d581f36-a3fe-53ab-a597-79a8627f262a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3151 vulnerable 2026-06-08 04:51:32.470799 Details available
Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileName parameter.
Published: 2009-09-10T18:00:00.000Z
Updated: 2024-08-07T06:14:56.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2769 vulnerable 2026-06-08 04:51:30.388581 Details available
PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config[include_dir] parameter.
Published: 2009-08-14T17:00:00.000Z
Updated: 2024-08-07T05:59:57.154Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.