5

CVE-2006-0691

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.79% 0.846
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/18854
http://www.evuln.com/vulns/69/summary.html
Vendor Advisory
http://www.securityfocus.com/archive/1/425505/100/0/threaded
http://www.securityfocus.com/bid/16630
http://www.vupen.com/english/advisories/2006/0524
http://www.securityfocus.com/bid/16731
https://exchange.xforce.ibmcloud.com/vulnerabilities/24570