Missing Authentication in ProjectWorlds Online Time Table Generator
CVE-2025-70146
9.1CRITICAL
What is CVE-2025-70146?
The Online Time Table Generator by ProjectWorlds is susceptible to a missing authentication flaw in multiple administrative scripts located in the /admin/ directory. This vulnerability permits remote attackers to execute unauthorized administrative actions, such as adding or deleting records, through direct HTTP requests to vulnerable endpoints while bypassing session validation. As a result, attackers can compromise the integrity of the application and manipulate sensitive data without legitimate access.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.