CVE-2010-4797

CVE-2010-4797 describes multiple SQL injection vulnerabilities within the login form of Truworth Flex Timesheet. Attackers can exploit these flaws by injecting malicious SQL commands into the Username and Password fields, potentially leading to unauthorized access and data manipulation. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild or Metasploit/Nuclei modules, an ExploitDB entry (EDB-15220) exists for an authentication bypass, indicating public knowledge of exploit techniques. Despite this, the CVE has received minimal community discussion or media coverage.