Skip to content
OpenAdvisories

Product · Timeclock

PHP Timeclock

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    PHP Timeclock 1.04 SQL Injection via login.php

    PHP Timeclock 1.04 contains time-based and boolean-based blind SQL injection vulnerabilities in the login_userid parameter of login.php that allows unauthenticated attackers to extract database contents. Attackers can submit crafted POST requests with SQL pay…