PatchTheCVEtimesheet vulnerabilities and fixes
Recent CVEs affecting timesheet, with upgrade or downgrade steps. 3 tracked.
timesheet has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-08-27. Highest priority: CVE-2009-2769 (score 48/100).
- CVE-2017-18590 MEDIUM 6.1 UPGRADE The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues.
- CVE-2009-3151 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attacke
- CVE-2009-2769 MEDIUM 6.8 DOWNGRADE PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_glo
FAQ
How do I fix timesheet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is timesheet being exploited right now?
None of the tracked timesheet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which timesheet CVE should I patch first?
CVE-2009-2769 currently ranks highest (48/100): PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_glo.