Clockingit.com suffers from a persistent cross site scripting vulnerability.
aeaad51cf1f6d71d64e3e5073b9ef5e34f91e2135dceb71f800e7896d79091c9
Kimai.org suffers from a cross site request forgery vulnerability.
ababc86e450c09897c728d9c0795706cb85265e41815ea0e9170e17750d6a6e1