CVE-2010-0124

CVE-2010-0124 affects Employee Timeclock Software 0.99, where the database password is exposed on the mysqldump command line. Local users can reveal the password by listing the running process, leading to potential sensitive-data disclosure. The vulnerability arises from credential exposure in co...

Secunia Research: Employee Timeclock Software "mysqldump" Password Disclosure

====================================================================== Secunia Research 10/03/2010 - Employee Timeclock Software "mysqldump" Password Disclosure - ====================================================================== Table of Contents Affected...