TI-2010-01012 CVE-2010-1053 · GHSA-fj99-v4gr-wrxcMultiple SQL injection vulnerabilities in Zen Time Tracking 2.2 and earlier, when…Priority LOW 32Multiple SQL injection vulnerabilities in Zen Time Tracking 2.2 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to…CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.00914 · Published 2010-03-22 · No fix listed CWE-89
