Missing Authentication in ProjectWorlds Online Time Table Generator
CVE-2025-70147
7.5HIGH
What is CVE-2025-70147?
The ProjectWorlds Online Time Table Generator version 1.0 exhibits a security flaw where missing authentication mechanisms in critical endpoints (/admin/student.php and /admin/teacher.php) permit unauthorized access to sensitive information. Attackers can exploit this vulnerability through direct HTTP GET requests, allowing them to retrieve plaintext passwords and other critical data without a validated session. It is essential for users and administrators to promptly address this flaw to safeguard sensitive information from potential breaches.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved