Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2006-0691

Description

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.

POC

Reference

- http://www.evuln.com/vulns/69/summary.html

Github

No PoCs found on GitHub currently.