Php Timeclock
Approved changes feed: RSS · Atom
cpe:2.3:a:timeclock:php_timeclock:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Timeclock (bb2689b1-8b3a-51c2-9054-3379932854aa) |
|---|---|
| Product | Php Timeclock (738d1b99-40e5-5a5d-aa0b-a62b9d48cb2f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-47967 |
vulnerable | 2026-06-08 05:38:08.006142 |
PHP Timeclock 1.04 Multiple Cross-Site Scripting via Parameters
MEDIUM (6.1)
PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow unauthenticated attackers to inject arbitrary JavaScript by manipulating URL paths and POST parameters. Attackers can append malicious payloads to login.php, timeclock.php, audit.php, and timerpt.php endpoints, or inject code through from_date and to_date parameters in report requests to execute scripts in user browsers.
Published: 2026-05-15T18:36:33.208Z
Updated: 2026-05-24T01:37:16.512Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-47966 |
vulnerable | 2026-06-08 05:38:08.005794 |
PHP Timeclock 1.04 SQL Injection via login.php
HIGH (8.2)
PHP Timeclock 1.04 contains time-based and boolean-based blind SQL injection vulnerabilities in the login_userid parameter of login.php that allows unauthenticated attackers to extract database contents. Attackers can submit crafted POST requests with SQL payloads using SLEEP functions or RLIKE conditional statements to dump sensitive database information including employee names and credentials.
Published: 2026-05-15T18:36:32.224Z
Updated: 2026-05-15T22:22:09.612Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.