CVE-2020-37005

TimeClock Software 1.01 contains an authenticated time-based SQL injection vulnerability that allows attackers to enumerate valid usernames by manipulating the 'notes' parameter. Attackers can inject conditional time delays in the addentry.php endpoint to determine user existence by measuring...

MINI-4H82-H65G-RF76

Bulletin has no description...

MINI-2VPP-59XH-28XC

Bulletin has no description...

ECHO-3DF5-A3A2-6763

Bulletin has no description...

ECHO-0153-957A-44F0

Bulletin has no description...

ECHO-29CA-E62D-EEC0

Bulletin has no description...

CGA-WRPG-F3HH-V959

Bulletin has no description...

CGA-WH52-9MGP-3JQG

Bulletin has no description...

CGA-FPXG-M44C-89VP

Bulletin has no description...

CGA-RJH2-9XFC-X5J3

Bulletin has no description...

CGA-RJF3-2QRQ-QM93

Bulletin has no description...

CGA-RH74-4XRC-3RV6

Bulletin has no description...

CGA-RGX8-J3CG-44HW

Bulletin has no description...

CGA-RFC7-C2XC-XC48

Bulletin has no description...

CGA-P578-GCV6-QJ9R

Bulletin has no description...

CGA-P393-QJC7-FHF4

Bulletin has no description...

CGA-MX7C-PRXR-5CQH

Bulletin has no description...

CGA-MRF5-FXGC-68CM

Bulletin has no description...

CGA-MR6W-V7H5-PX4G

Bulletin has no description...

CGA-MR3G-56M3-2W4M

Bulletin has no description...