Vendor

Anuko

1 brief RSS

Anuko Time Tracker: Authenticated SQL Injection via puncher.php (CVE-2022-24707)

An authenticated SQL injection vulnerability in the Anuko Time Tracker puncher component allows attackers to exfiltrate database credentials via the date parameter.

Time Tracker web-vulnerability sqli credential-theft

1r 1t 1c 1h ago