CVE-2006-0691

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

2.86% chance of exploitation in the next 30 days, 87th percentile

Published

2006-02-15

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27250

Security advisories

• http://www.evuln.com/vulns/69/summary.html
• http://www.securityfocus.com/bid/16630
• http://www.securityfocus.com/bid/16731

References

• CVE Record
• NVD entry