This host is running Pacific Timesheet and is prone to cross-site request forgery vulnerability.

Successful exploitation will allow attackers to perform unauthorized actions. Impact Level: Application

Update to version 6.75 or later. For updates refer to http://www.pacifictimesheet.com/

The flaw is due to improper validation of user-supplied input. A remote attacker could exploit this vulnerability to perform cross-site request forgery by tricking a logged in administrator into visiting a malicious web site or link to perform unauthorized actions.

Pacific Timesheet version 6.74 build 363.

• http://cross-site-scripting.blogspot.com/2010/05/pacific-timesheet-674-cross-site.html
• http://secunia.com/advisories/39951
• http://xforce.iss.net/xforce/xfdb/58934

---

Updated on 2015-03-25