Vulnerabilities > Anuko > Time Tracker > 1.3.50.1015

DATE CVE VULNERABILITY TITLE RISK
2023-05-15 CVE-2023-32308 SQL Injection vulnerability in Anuko Time Tracker
anuko timetracker is an open source time tracking system.
network
low complexity
anuko CWE-89
critical
9.8
2023-05-12 CVE-2023-32306 SQL Injection vulnerability in Anuko Time Tracker
Time Tracker is an open source time tracking system.
network
low complexity
anuko CWE-89
critical
9.8
2023-05-09 CVE-2023-32066 Cross-site Scripting vulnerability in Anuko Time Tracker
Time Tracker is an open source time tracking system.
network
low complexity
anuko CWE-79
5.4
2022-02-24 CVE-2022-24707 SQL Injection vulnerability in Anuko Time Tracker
Anuko Time Tracker is an open source, web-based time tracking application written in PHP.
network
low complexity
anuko CWE-89
6.5
2022-02-24 CVE-2022-24708 Cross-site Scripting vulnerability in Anuko Time Tracker
Anuko Time Tracker is an open source, web-based time tracking application written in PHP.
network
anuko CWE-79
3.5
2021-12-22 CVE-2021-43851 SQL Injection vulnerability in Anuko Time Tracker
Anuko Time Tracker is an open source, web-based time tracking application written in PHP.
network
low complexity
anuko CWE-89
6.5
2021-10-13 CVE-2021-41139 Cross-site Scripting vulnerability in Anuko Time Tracker
Anuko Time Tracker is an open source, web-based time tracking application written in PHP.
network
anuko CWE-79
4.3
2021-04-13 CVE-2021-29436 Cross-Site Request Forgery (CSRF) vulnerability in Anuko Time Tracker
Anuko Time Tracker is an open source, web-based time tracking application written in PHP.
network
anuko CWE-352
5.8
2020-10-16 CVE-2020-15255 Improper Neutralization of Formula Elements in a CSV File vulnerability in Anuko Time Tracker
In Anuko Time Tracker before verion 1.19.23.5325, due to not properly filtered user input a CSV export of a report could contain cells that are treated as formulas by spreadsheet software (for example, when a cell value starts with an equal sign).
network
anuko CWE-1236
6.0