Timeclock-Software Employee Timeclock Software
4 CVEs affecting Timeclock-Software Employee Timeclock Software. Latest disclosed: 2010-03-15. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2010-0124 | | 2010-03-15 | Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listin… | |
CVE-2010-0123 | | 2010-03-15 | The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient access control, which… | |
CVE-2010-0122 | | 2010-03-15 | Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2)… | |
CVE-2010-0707 | | 2010-02-25 | Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an… |