Timeclock-software - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2010-03-15.

Products

• Employee Timeclock Software - 4 CVEs

Newest CVEs of Timeclock-software

• CVE-2010-0124 - CVSS 2.1 (low), 2010-03-15: Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by…
• CVE-2010-0123 - CVSS 5 (medium), 2010-03-15: The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient access control, which…
• CVE-2010-0122 - CVSS 7.5 (high), 2010-03-15: Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the (1) username or…
• CVE-2010-0707 - CVSS 6.8 (medium), 2010-02-25: Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an…