CVE-2010-0122

Description

Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) auth.php or (b) login_action.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/56799

http://www.securityfocus.com/bid/38639

http://www.securityfocus.com/archive/1/509995/100/0/threaded

http://www.osvdb.org/62832

http://www.osvdb.org/62831

http://secunia.com/secunia_research/2010-11/

http://secunia.com/advisories/38739

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS