Secunia Research has discovered security issue in Employee Timeclock Software, which can be exploited by malicious, local users to disclose sensitive information. The security issue is caused due to the application passing the database password via the command line to the “mysqldump” utility, which potentially can be exploited to disclose the password via the process list. Version 0.99 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/87087/secunia-etsdisclose.txt
Source: https://packetstormsecurity.com/files/87087/Employee-Timeclock-Software-mysqldump-Password-Disclosure.html