CVE-2010-0707

2010-02-2518:03:00

mitre

www.cve.org

AI Score

7.1

Confidence

Low

EPSS

0.008

Percentile

81.9%

JSON

Cross-site request forgery (CSRF) vulnerability in add_user.php in Employee Timeclock Software 0.99 allows remote attackers to hijack the authentication of an administrator for requests that create new administrative users. NOTE: some of these details are obtained from third party information.