Lucene search
MitreCVE-2010-0707HistoryFeb 25, 2010 - 6:30 p.m.
CVE-2010-0707
2010-02-2518:30:00
CWE-352
mitre
web.nvd.nist.gov
22
cve-2010-0707
csrf
employee timeclock software
vulnerability
authentication hijacking
add_user.php
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.008
Percentile
81.9%
Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create new administrative users. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
timeclock-softwareemployee_timeclock_softwareMatch0.99
| Vendor | Product | Version | CPE |
|---|---|---|---|
| timeclock-software | employee_timeclock_software | 0.99 | cpe:2.3:a:timeclock-software:employee_timeclock_software:0.99:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2010-0707
2010-02-25 18:03:00
nvd
nvd
CVE-2010-0707
2010-02-25 18:30:00
prion
prion
Cross site request forgery (csrf)
2010-02-25 18:30:00
exploitdb
exploitdb
TimeClock 0.99 - Cross-Site Request Forgery (Add Admin)
2010-02-20 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.008
Percentile
81.9%
Related for CVE-2010-0707