CVE-2006-0691 edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.
MediumCVSS 5.0
EPSS 2.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| scheduling management.com time tracking software | = 3.0 | No fix listed |
References
- 18854 third-party-advisory
- www.evuln.com vendor-advisory
- 20060219 [eVuln] Time Tracking Software Multiple Vulnerabilities mailing-list
- 16630 vdb-entry
- 16731 vdb-entry
- ADV-2006-0524 vdb-entry
- timetracking-edituser-auth-bypass(24570) vdb-entry