CVE-2010-1053

CVE-2010-1053 affects Zen Time Tracking 2.2 and earlier. The vulnerability arises from multiple SQL injection flaws in login paths (userlogin.php and managerlogin.php) where the input parameters (username, password) can be exploited when magic_quotes_gpc is disabled. This allows remote attackers ...