VULNERABILITY INTELLIGENCE

CVE-2006-0691

CVSS score5 MEDIUM
EPSS probability2.86%
CISA KEVNot currently listed
Published2006-02-15
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.

Primary references