TimeClock Software version 1.01 suffers from an authenticated time-based remote SQL injection vulnerability.