Skip to content
OpenAdvisories

Product · anuko

timetracker

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.2
    CVE-2023-32308

    SQL Injection Vulnerability in anuko timetracker

    anuko timetracker is an open source time tracking system. Boolean-based blind SQL injection vulnerability existed in Time Tracker invoices.php in versions prior to 1.22.11.5781. This was happening because of a coding error after validating parameters in POST …

    anuko timetracker
  • High 8.8
    CVE-2023-32306

    Time Tracker has Blind SQL Injection Vulnerability in Reports

    Time Tracker is an open source time tracking system. A time-based blind injection vulnerability existed in Time Tracker reports in versions prior to 1.22.13.5792. This was happening because the `reports.php` page was not validating all parameters in POST requ…

    anuko timetracker
  • High 7.4
    CVE-2022-24707 Public exploit

    SQL injection in anuko timetracker

    Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection vulnerabilities existed in Time Tracker Puncher plugin in versions of anuko timetracker prior to 1.20.0.5642. This was…

    anuko timetracker
  • High 8.1
    CVE-2021-43851

    SQL injection vulnerability in anuko timetracker

    Anuko Time Tracker is an open source, web-based time tracking application written in PHP. SQL injection vulnerability exist in multiple files in Time Tracker version 1.19.33.5606 and prior due to not properly checking of the "group" and "status" parameters in…

    anuko timetracker
  • High 8.1
    CVE-2021-41139

    Reflected XSS vulnerability in time.php

    Anuko Time Tracker is an open source, web-based time tracking application written in PHP. When a logged on user selects a date in Time Tracker, it is being passed on via the date parameter in URI. Because of not checking this parameter for sanity in versions …

    anuko timetracker
  • High 8.7
    CVE-2020-15255 Public exploit

    CSV injection in Anuko Time Tracker

    In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treated as formulas by spreadsheet software (for example, when a cell value starts with an equal sign). This is fix…

    anuko timetracker