Efrotech Timetrax
2 CVEs affecting Efrotech Timetrax. Latest disclosed: 2025-06-18. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-46157 | Critical | 9.9 | 2025-06-18 | An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave request form |
CVE-2024-39250 | Critical | 9.8 | 2024-07-22 | EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface. |