CVE-2006-0690

CVE-2006-0690 affects TTS Time Tracking Software 3.0 with multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Public sources (NVD/eVuln) cite remote exploitation and, per eVuln, unauthorized data modification and additional...

CVE-2006-0689

CVE-2006-0689 affects TTS Software’s Time Tracking Software (Version 3.0). The vulnerability is a Cross-site Scripting (XSS) flaw in the Registration Form: the UserName parameter is not properly sanitized, allowing remote attackers to inject arbitrary script/HTML. Public disclosures in NVD and re...

CVE-2006-0691

CVE-2006-0691 concerns TTS Time Tracking Software 3.0. The vulnerability lies in edituser.php, which does not verify that the provided name and password are correct, enabling remote attackers to overwrite arbitrary data belonging to any account. Affected component: edituser.php in Time Tracking S...