CVE-2006-0691
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are...
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.
Exploit likelihood
What each source reports
NVD Score used
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.
- Record
CVE-2006-0691- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.
- Record
CVE-2006-0691- Updated
- 2026-11-02
EUVDEUVD-2006-0698 No score
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.
- Record
EUVD-2006-0698- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6789-mw3x-jqxj No score
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are...
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.
- Record
GHSA-6789-mw3x-jqxj- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | TTS Software Time Tracking Software 3.0 - 'edituser.php' Access Validation | 2006-02-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0691 is a medium vulnerability (CVSS 5.0) in Scheduling Management.com Time Tracking Software, published February 15, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.86%, the 86th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2006/0524
securityfocus.com/bid/16731
evuln.com/vulns/69/summary.html
secunia.com/advisories/18854
exchange.xforce.ibmcloud.com/vulnerabilities/24570
nvd.nist.gov/vuln/detail/CVE-2006-0691
github.com/advisories/GHSA-6789-mw3x-jqxj