Описание
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:scheduling_management.com:time_tracking_software:3.0:*:*:*:*:*:*:*
EPSS
Процентиль: 93%
0.09894
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.
EPSS
Процентиль: 93%
0.09894
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other