Livetecs: >> Timeline >> 3.0.1 Security Vulnerabilities
Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers to change configurations and obtain the database connection string and credentials via unspecified vectors.
CVSS Score
7.5
EPSS Score
0.006
Published
2014-04-28
Unrestricted file upload vulnerability in the Manage Project functionality in Livetecs Timelive before 6.5.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a predictable directory in Uploads/.
CVSS Score
7.5
EPSS Score
0.015
Published
2014-04-28