CVE-2006-0691

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

2.86% chance of exploitation in the next 30 days, 86th percentile

Published

2006-02-15

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27250

References

• CVE Record
• NVD entry

Related

• CVE-2006-0688
• CVE-2006-0699
• CVE-2006-0687
• CVE-2006-0700
• CVE-2006-0685
• CVE-2006-0701