5
CVSSv2

CVE-2002-0584

Published: 18/06/2002 Updated: 05/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

WorkforceROI Xpede 4.1 allows remote malicious users to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 for each new timesheet.

Vulnerable Product Search on Vulmon Subscribe to Product

workforceroi xpede 4.1