CVE-2010-0124
Employee Timeclock Software 0.99 places the database password on the mysqldump command line,...
CVE-2010-0124 is a low vulnerability (CVSS 2.1) in Timeclock-software Employee Timeclock Software, published March 12, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. No source names a fixed version.
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
Exploit likelihood
What each source reports
NVD Score used
2.1
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
- Record
CVE-2010-0124- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
- Record
CVE-2010-0124- Updated
- 2026-11-02
EUVDEUVD-2010-0156 No score
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
- Record
EUVD-2010-0156- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-42m2-ww59-87vv No score
Employee Timeclock Software 0.99 places the database password on the mysqldump command line,...
Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
- Record
GHSA-42m2-ww59-87vv- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |