Read the docs

Kimai Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Kimai Project records in CISA KEV

No Kimai Project vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2013-06176 CVE-2013-10033 · GHSA-ff3c-wfr9-cj43

Kimai 0.9.2 db_restore.php SQL Injection

Priority HIGH 81

An unauthenticated SQL injection vulnerability exists in Kimai version 0.9.2.x via the db_restore.php endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02109 Published 2025-07-31 No fix listed CWE-89
Open these records in search →