Vulnerabilities

TI-2006-00670 CVE-2006-0691 · GHSA-6789-mw3x-jqxj

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password…

LOW 28

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02857 Published 2006-02-15 No fix listed

TI-2006-00669 CVE-2006-0690 · GHSA-wq29-6jj4-2p3r

Multiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote…

LOW 36

Multiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01369 Published 2006-02-15 No fix listed

TI-2006-00668 CVE-2006-0689 · GHSA-62m6-45xm-qf42

Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking…

LOW 23

Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0133 Published 2006-02-15 No fix listed

Vulnerabilities

Filters

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password…

Multiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote…

Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking…