CVE-2025-70147 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive…
High CVSS: 7.5

CVE-2025-70147

Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to obtain sensitive information (including plaintext password field values) via direct HTTP GET requests to these endpoints without a valid session.
Vendor
Projectworlds
Product
Online Time Table Generator
CWE
CWE-306
Yayın Tarihi
2026-02-18 17:21:36
Güncelleme
2026-02-20 20:07:38
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-306 Online Time Table Generator HIGH Projectworlds 2026

Referanslar

https://projectworlds.com/online-time-table-generator-php-mysql/ https://youngkevinn.github.io/posts/CVE-2025-70147-OTTTG-Info-Disclosure/