Skip to content
OpenAdvisories

Product · anuko

timetracker

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2022-24707 Public exploit

    SQL injection in anuko timetracker

    Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection vulnerabilities existed in Time Tracker Puncher plugin in versions of anuko timetracker prior to 1.20.0.5642. This was…

    anuko timetracker
  • High 8.7
    CVE-2020-15255 Public exploit

    CSV injection in Anuko Time Tracker

    In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treated as formulas by spreadsheet software (for example, when a cell value starts with an equal sign). This is fix…

    anuko timetracker