Lucene search
HistoryMar 15, 2010 - 1:28 p.m.
CVE-2010-0122
cve-2010-0122
sql injection
employee timeclock software
nvd
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
57.3%
Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) auth.php or (b) login_action.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| timeclock-software:employee_timeclock_software | timeclock-software employee timeclock software | eq | 0.99 |
Related
prion
prion
Sql injection
2010-03-15 13:28:00
exploitpack
exploitpack
Employee TimeClock Software 0.99 - SQL Injection
2010-03-10 00:00:00
securityvulns
securityvulns
cvelist
cvelist
CVE-2010-0122
2010-03-12 20:00:00
exploitdb
exploitdb
Employee TimeClock Software 0.99 - SQL Injection
2010-03-10 00:00:00
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
57.3%
Related for CVE-2010-0122