Softerra Time-Assistant "inc_dir" and "lib_dir" Parameters File Inclusion Vulnerabilities
Description
Multiple vulnerabilities have been identified in Softerra Time-Assistant, which could be exploited by attackers to execute arbitrary commands. These issues are due to input validation errors in the "lib/timesheet.class.php" script when processing the "inc_dir" and "lib_dir" parameters, which could be exploited by remote attackers to include malicious scripts and execute arbitrary commands with the privileges of the web server.
