Lucene search
MitreCVE-2006-0691HistoryFeb 15, 2006 - 11:06 a.m.
CVE-2006-0691
2006-02-1511:06:00
mitre
web.nvd.nist.gov
19
cve-2006-0691
nvd
tts time tracking software
remote attack
data overwrite
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.9
Confidence
High
EPSS
0.135
Percentile
95.6%
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.
Affected configurations
Node
scheduling_management.comtime_tracking_softwareMatch3.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| scheduling_management.com | time_tracking_software | 3.0 | cpe:2.3:a:scheduling_management.com:time_tracking_software:3.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2006-0691
2006-02-15 11:06:00
cvelist
cvelist
CVE-2006-0691
2006-02-15 11:00:00
exploitdb
exploitdb
prion
prion
Default credentials
2006-02-15 11:06:00
securityvulns
securityvulns
[eVuln] Time Tracking Software Multiple Vulnerabilities
2006-02-21 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.9
Confidence
High
EPSS
0.135
Percentile
95.6%
Related for CVE-2006-0691