Vulnerabilities > Anuko

DATE CVE VULNERABILITY TITLE RISK
2023-05-15 CVE-2023-32308 SQL Injection vulnerability in Anuko Time Tracker
anuko timetracker is an open source time tracking system.
network
low complexity
anuko CWE-89
critical
9.8
2023-05-12 CVE-2023-32306 SQL Injection vulnerability in Anuko Time Tracker
Time Tracker is an open source time tracking system.
network
low complexity
anuko CWE-89
critical
9.8
2023-05-09 CVE-2023-32066 Cross-site Scripting vulnerability in Anuko Time Tracker
Time Tracker is an open source time tracking system.
network
low complexity
anuko CWE-79
5.4
2022-02-24 CVE-2022-24707 SQL Injection vulnerability in Anuko Time Tracker
Anuko Time Tracker is an open source, web-based time tracking application written in PHP.
network
low complexity
anuko CWE-89
6.5
2022-02-24 CVE-2022-24708 Cross-site Scripting vulnerability in Anuko Time Tracker
Anuko Time Tracker is an open source, web-based time tracking application written in PHP.
network
anuko CWE-79
3.5
2021-12-22 CVE-2021-43851 SQL Injection vulnerability in Anuko Time Tracker
Anuko Time Tracker is an open source, web-based time tracking application written in PHP.
network
low complexity
anuko CWE-89
6.5
2021-10-13 CVE-2021-41139 Cross-site Scripting vulnerability in Anuko Time Tracker
Anuko Time Tracker is an open source, web-based time tracking application written in PHP.
network
anuko CWE-79
4.3
2021-04-13 CVE-2021-29436 Cross-Site Request Forgery (CSRF) vulnerability in Anuko Time Tracker
Anuko Time Tracker is an open source, web-based time tracking application written in PHP.
network
anuko CWE-352
5.8
2021-03-03 CVE-2021-21352 Use of Insufficiently Random Values vulnerability in Anuko Time Tracker 1.19.23.5311/1.19.23.5324/1.19.23.5325
Anuko Time Tracker is an open source, web-based time tracking application written in PHP.
network
low complexity
anuko CWE-330
5.0
2020-11-16 CVE-2020-27423 Improper Restriction of Excessive Authentication Attempts vulnerability in Anuko Time Tracker 1.19.23.5311
Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on any legitimate user's mailbox
network
low complexity
anuko CWE-307
5.0