Anuko vulnerabilities
We track 3 vulnerabilities in Anuko products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2023.
Latest Anuko vulnerabilities
- 9.8 Critical severity
timetracker: Improper Neutralization of Special Elements used in an SQL Command
anuko timetracker is an open source time tracking system. Boolean-based blind SQL injection vulnerability existed in Time Tracker invoices.php in versions prior to 1.22.11.5781. This was happening because of a coding error after validating parameters in POST r
- 9.8 Critical severity
timetracker: Improper Neutralization of Special Elements used in an SQL Command
Time Tracker is an open source time tracking system. A time-based blind injection vulnerability existed in Time Tracker reports in versions prior to 1.22.13.5792. This was happening because the `reports.php` page was not validating all parameters in POST reque
- 8.8 High severity
timetracker: Improper Neutralization of Special Elements used in an SQL Command
Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection vulnerabilities existed in Time Tracker Puncher plugin in versions of anuko timetracker prior to 1.20.0.5642. This was