CVE-2007-0049 Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add action with a modified GroupID in a direct request to Customize.asp.
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add action with a modified GroupID in a direct request to Customize.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| geckovich tasktracker | = 1.4 | No fix listed |
| geckovich tasktracker pro | <= 1.5 | No fix listed |
References
- 31682 vdb-entry
- 23564 third-party-advisory vendor-advisory
- 21847 exploit vdb-entry
- tasktrackerpro-customize-auth-bypass(31235) vdb-entry
- 3068 exploit