critical9.8
CVE-2024-39250
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface.
Impact
EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Efrotech | Timetrax | Version 8.3 |