https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T05:59:04.276087+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2013-10033 CVE-2013-10033 — Kimai 0.9.2 db_restore.php SQL Injection 2026-10-20T05:59:04.277619+00:00

Affected: Kimai Project Kimai

An unauthenticated SQL injection vulnerability exists in Kimai version 0.9.2.x via the db_restore.php endpoint. The flaw allows attackers to inject arbitrary SQL queries into the dates[] POST parameter, enabling file write via INTO OUTFILE under specific environmental conditions. This can lead to remote code execution by writing a PHP payload to the web-accessible temporary directory. The vulnerability has been confirmed in versions including 0.9.2.beta, 0.9.2.1294.beta, and 0.9.2.1306-3.