CVE-2006-0689

MEDIUM 4.3CVE-2006-0689 · Published 15/02/2006 · updated 16/06/2026

In short

CVE-2006-0689 is a MEDIUM (CVSS 4.3) vulnerability affecting time tracking software (scheduling management.com).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
time tracking software scheduling_management.com	`= 3.0`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter.

References

secunia.com/advisories/18854
evuln.com/vulns/69/summary.html · Vendor Advisory
securityfocus.com/archive/1/425505/100/0/threaded
securityfocus.com/bid/16630
vupen.com/english/advisories/2006/0524
exchange.xforce.ibmcloud.com/vulnerabilities/24572

More vulnerabilities in time tracking software

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free