Read the docs

Timeclock

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Timeclock records in CISA KEV

No Timeclock vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2021-22579 CVE-2021-47966 · GHSA-c527-x2v3-x59w

PHP Timeclock 1.04 SQL Injection via login.php

Priority HIGH 77

PHP Timeclock 1.04 contains time-based and boolean-based blind SQL injection vulnerabilities in the login_userid parameter of login.php that allows unauthenticated attackers to extract database contents.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0027 Published 2026-05-15 No fix listed CWE-89
TI-2021-22580 CVE-2021-47967 · GHSA-9cv2-qjw6-qv9j

PHP Timeclock 1.04 Multiple Cross-Site Scripting via Parameters

Priority MEDIUM 56

PHP Timeclock 1.04 contains multiple cross-site scripting vulnerabilities that allow unauthenticated attackers to inject arbitrary JavaScript by manipulating URL paths and POST parameters.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00211 Published 2026-05-15 No fix listed CWE-79
Open these records in search →