Lucene search
HistoryMar 15, 2010 - 1:28 p.m.
CVE-2010-0122
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.6
Confidence
Low
EPSS
0.002
Percentile
57.5%
Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) auth.php or (b) login_action.php.
Affected configurations
Node
timeclock-softwareemployee_timeclock_softwareMatch0.99
| Vendor | Product | Version | CPE |
|---|---|---|---|
| timeclock-software | employee_timeclock_software | 0.99 | cpe:2.3:a:timeclock-software:employee_timeclock_software:0.99:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2010-0122
2010-03-15 13:28:25
exploitdb
exploitdb
Employee TimeClock Software 0.99 - SQL Injection
2010-03-10 00:00:00
securityvulns
securityvulns
prion
prion
Sql injection
2010-03-15 13:28:00
exploitpack
exploitpack
Employee TimeClock Software 0.99 - SQL Injection
2010-03-10 00:00:00
cvelist
cvelist
CVE-2010-0122
2010-03-12 20:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.6
Confidence
Low
EPSS
0.002
Percentile
57.5%
Related for NVD:CVE-2010-0122