High
CVSS 7.5
Overview
Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add action with a modified GroupID in a direct request to Customize.asp.
Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add adminis...
Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add action with a modified GroupID in a direct request to Customize.asp.
This vulnerability is rated 🟠 HIGH.
Recommended actions: