CVE-2007-6217: Multiple SQL injection vulnerabilities in login.asp in Irola My-Time (aka Timesheet) 3.5 allow remote attac...

Security readout for executives and security teams

This is an old SQL injection issue in Irola My-Time (Timesheet) 3.5. A remote attacker may manipulate the login page fields to run database commands. For an exposed timesheet system, that could affect employee time records, account data, or the database behind the app. Sources do not provide CVSS, patch details, or active exploitation evidence. Exposure is most likely where legacy Irola My-Time, also called Timesheet, version 3.5 remains reachable over a network, especially internet-facing login.asp deployments. The bundle lists affected vendor and product fields as unavailable, so inventory confirmation is necessary. Prioritize remediation if the product is still deployed, because the flaw affects authentication inputs and can reach the backing database. Absence from KEV lowers evidence of current exploitation, but public exploit references and legacy software risk justify prompt inventory and containment. Mitigation focus: Identify and remove internet exposure for any Irola My-Time 3.5 instance.; Check vendor or maintainer guidance for any available fixed version or workaround.; Restrict access to trusted networks until remediation is confirmed..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.