CVE-2006-0691 : edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.

Published 2006-02-15 11:06:00

Updated 2018-10-19 15:45:54

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2006-0691

Scheduling Management.com » Time Tracking Software » Version: 3.0
cpe:2.3:a:scheduling_management.com:time_tracking_software:3.0:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-0691

EPSS FAQ

13.45%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 95 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-0691

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

References for CVE-2006-0691

Jump to

Vulnerability Details : CVE-2006-0691

Products affected by CVE-2006-0691

Exploit prediction scoring system (EPSS) score for CVE-2006-0691

CVSS scores for CVE-2006-0691

References for CVE-2006-0691