CVE-2010-0123
timeclock-software employee timeclock software: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days.
The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a "semi-predictable file name."
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- timeclock-software:employee_timeclock_software