https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T03:27:40.561391+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-37005 CVE-2020-37005 — TimeClock Software 1.01 Authenticated Time-Based SQL Injection 2026-10-22T03:27:40.562585+00:00

Affected: TimeClock Software

TimeClock Software 1.01 contains an authenticated time-based SQL injection vulnerability that allows attackers to enumerate valid usernames by manipulating the 'notes' parameter. Attackers can inject conditional time delays in the add_entry.php endpoint to determine user existence by measuring response time differences.