CVE-2010-0123: Timeclock-Software Employee Timeclock Software

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a "semi-predictable file name."

Affected products

Published 2010-03-15. Last modified 2026-06-16.