WS-2023-0170

A SQL Injection vulnerability was discovered in anuto/timetracker prior to 1.22.11.5779. The vulnerability affects several POST parameters, including chstart, chproject, chfinish, chduration, chnote, chcost, chip and chtotalsonly, in reference to the checkboxes functionalities present while...