Anuko

13 CVEs across 2 Anuko products. Browse Anuko vulnerabilities, severities, and proof-of-concept exploits.

Anuko products with known CVEs

ProductCVEs
Time Tracker12
Timetracker11
Anuko CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-32308High8.22023-05-15anuko timetracker is an open source time tracking system. Boolean-based blind SQL injection vulnerability existed in Time Tracker invoices.php in versions prio…
CVE-2023-32306High8.82023-05-12Time Tracker is an open source time tracking system. A time-based blind injection vulnerability existed in Time Tracker reports in versions prior to 1.22.13.57…
CVE-2023-32066Medium5.42023-05-09Time Tracker is an open source time tracking system. The week view plugin in Time Tracker versions 1.22.11.5782 and prior was not escaping titles for notes in…
CVE-2022-24708Medium6.52022-02-24Anuko Time Tracker is an open source, web-based time tracking application written in PHP. ttUser.class.php in Time Tracker versions prior to 1.20.0.5646 was no…
CVE-2022-24707High7.42022-02-24Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection vulnerabilities ex…
CVE-2021-43851High8.12021-12-22Anuko Time Tracker is an open source, web-based time tracking application written in PHP. SQL injection vulnerability exist in multiple files in Time Tracker v…
CVE-2021-41156Medium6.82021-10-18anuko/timetracker is an, open source time tracking system. In affected versions Time Tracker uses browser_today hidden control on a few pages to collect the to…
CVE-2021-41139High8.12021-10-13Anuko Time Tracker is an open source, web-based time tracking application written in PHP. When a logged on user selects a date in Time Tracker, it is being pas…
CVE-2021-29436Medium5.42021-04-13Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In Time Tracker before version 1.19.27.5431 a Cross site request forg…
CVE-2021-21352Medium6.82021-03-03Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In TimeTracker before version 1.19.24.5415 tokens used in password re…
CVE-2020-27423High7.52020-11-16Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user…
CVE-2020-27422Critical9.82020-11-16In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an attacker to use the same link to takeove…
CVE-2020-15255High8.72020-10-16In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treated as form…