Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers to change configurations and obtain the database connection string and credentials via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Livetecs Timelive 权限许可和访问控制漏洞
Vulnerability Description
Livetecs Timelive是美国Livetecs公司的一套时间管理解决方案。该方案提供时间表、员工考勤、费用管理和电子邮件通知等功能。 Livetecs Timelive 6.2.7.1及之前的版本中存在安全漏洞，该漏洞源于程序没有正确限制对systemsetting.aspx文件的访问。远程攻击者可利用该漏洞更改配置，获取数据库连接字符串和凭证。
CVSS Information
N/A
Vulnerability Type
N/A