Lucene search
+L

CVE-2022-24707

🗓️ 23 Feb 2022 23:50:14Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov👁 162 Views🌐 WEB

Anuko Time Tracker prior to 1.20.0.5642 is prone to UNION SQL injection and time-based blind injection vulnerabilities in the Puncher plugin

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
zdt
zdt
Anuko Time Tracker - SQL injection (Authenticated) Vulnerability
12 May 202200:00
–zdt
githubexploit
GithubExploit
Exploit for SQL Injection in Anuko Time_Tracker
3 May 202201:11
–githubexploit
githubexploit
GithubExploit
Exploit for SQL Injection in Anuko Time_Tracker
23 Oct 202610:25
–githubexploit
bdu_fstec
BDU FSTEC
Anuko Time Tracker SQL Injection
13 May 202200:00
–bdu_fstec
circl
Circl
CVE-2022-24707
3 May 202201:25
–circl
cnnvd
CNNVD
Anuko Time Tracker SQL Injection Vulnerability
24 Feb 202200:00
–cnnvd
cvelist
Cvelist
CVE-2022-24707 SQL injection in anuko timetracker
23 Feb 202223:50
–cvelist
exploitdb
Exploit DB
Anuko Time Tracker - SQLi (Authenticated)
11 May 202200:00
–exploitdb
euvd
EUVD
EUVD-2022-29573
3 Oct 202520:07
–euvd
kitploit
Kitploit
CVE-2022-24707
30 Oct 202608:35
–kitploit
Rows per page
NVD
Vulners
Node
anukotime_trackerRange<1.20.0.5642
[
  {
    "product": "timetracker",
    "vendor": "anuko",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.20.0.5642"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
daterequest body/puncher.phpAuthenticated SQL injection via the Puncher plugin's date parameter in puncher.php POST requests.CWE-89

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 04:32Current
8.7High risk
Vulners AI Score8.7
CVSS 26.5
CVSS 3.17.4 - 8.8
EPSS0.07159
SSVC
162