VULNERABILITY INTELLIGENCE

CVE-2025-70146

CVSS score9.1 CRITICAL

EPSS probability0.64%

CISA KEVNot currently listed

Published2026-02-18

Last modified2026-09-08

Description

Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations (e.g.,adding records, deleting records) via direct HTTP requests to affected endpoints without a valid session.