Anuko Time Tracker
12 CVEs affecting Anuko Time Tracker. Latest disclosed: 2023-05-15. Critical: 1, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-27422 | Critical | 9.8 | 2020-11-16 | In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an attacker to use the same link to takeove… |
CVE-2023-32306 | High | 8.8 | 2023-05-12 | Time Tracker is an open source time tracking system. A time-based blind injection vulnerability existed in Time Tracker reports in versions prior to 1.22.13.57… |
CVE-2020-15255 | High | 8.7 | 2020-10-16 | In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treated as form… |
CVE-2023-32308 | High | 8.2 | 2023-05-15 | anuko timetracker is an open source time tracking system. Boolean-based blind SQL injection vulnerability existed in Time Tracker invoices.php in versions prio… |
CVE-2021-43851 | High | 8.1 | 2021-12-22 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. SQL injection vulnerability exist in multiple files in Time Tracker v… |
CVE-2021-41139 | High | 8.1 | 2021-10-13 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. When a logged on user selects a date in Time Tracker, it is being pas… |
CVE-2020-27423 | High | 7.5 | 2020-11-16 | Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user… |
CVE-2022-24707 | High | 7.4 | 2022-02-24 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection vulnerabilities ex… |
CVE-2021-21352 | Medium | 6.8 | 2021-03-03 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In TimeTracker before version 1.19.24.5415 tokens used in password re… |
CVE-2022-24708 | Medium | 6.5 | 2022-02-24 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. ttUser.class.php in Time Tracker versions prior to 1.20.0.5646 was no… |
CVE-2023-32066 | Medium | 5.4 | 2023-05-09 | Time Tracker is an open source time tracking system. The week view plugin in Time Tracker versions 1.22.11.5782 and prior was not escaping titles for notes in… |
CVE-2021-29436 | Medium | 5.4 | 2021-04-13 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In Time Tracker before version 1.19.27.5431 a Cross site request forg… |