Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Time Tracker CRITICAL 9.8
CVE-2023-32308

anuko timetracker is an open source time tracking system. Boolean-based blind SQL injection vulnerability existed in Time Tracker invoices.php in ver…

Fix: 1.22.11.5781+
Fix from $2,300 2023-05-15
Time Tracker CRITICAL 9.8
CVE-2023-32306

Time Tracker is an open source time tracking system. A time-based blind injection vulnerability existed in Time Tracker reports in versions prior to …

Fix: 1.22.13.5792+
Fix from $2,300 2023-05-12
Time Tracker MEDIUM 5.4
CVE-2023-32066

Time Tracker is an open source time tracking system. The week view plugin in Time Tracker versions 1.22.11.5782 and prior was not escaping titles for…

Fix: 1.22.12.5783+
Fix from $1,600 2023-05-09
Time Tracker HIGH 8.8
CVE-2022-24707EPSS 7%

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection vulnerab…

Fix: 1.20.0.5642+
Fix from $1,950 2022-02-24
Time Tracker MEDIUM 5.4
CVE-2022-24708

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. ttUser.class.php in Time Tracker versions prior to 1.20.0.5…

Fix: 1.20.0.5646+
Fix from $1,600 2022-02-24
Time Tracker HIGH 8.8
CVE-2021-43851

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. SQL injection vulnerability exist in multiple files in Time…

Fix: 1.19.33.5607+
Fix from $1,950 2021-12-22
Time Tracker MEDIUM 6.1
CVE-2021-41139

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. When a logged on user selects a date in Time Tracker, it is…

Fix: 1.19.30.5600+
Fix from $1,600 2021-10-13
Time Tracker HIGH 8.1
CVE-2021-29436

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In Time Tracker before version 1.19.27.5431 a Cross site re…

Fix: 1.19.27.5431+
Fix from $1,950 2021-04-13
Time Tracker CRITICAL 9.1
CVE-2021-21352

Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In TimeTracker before version 1.19.24.5415 tokens used in p…

Fix: 1.19.24.5415+
Fix from $2,300 2021-03-03
Time Tracker CRITICAL 9.8
CVE-2020-27422EPSS 8%

In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an attacker to use the same link …

Fix: after 1.19.23.5311
Fix from $2,300 2020-11-16
Time Tracker HIGH 7.5
CVE-2020-27423EPSS 6%

Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legit…

Fix: after 1.19.23.5311
Fix from $1,950 2020-11-16
Time Tracker HIGH 7.3
CVE-2020-15255

In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treat…

Fix: 1.19.23.5325+
Fix from $1,950 2020-10-16