CVE-2014-1217

Published: Apr 28, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Livetecs Timelive before 6.2.8 does not properly restrict access to systemsetting.aspx, which allows remote attackers to change configurations and obtain the database connection string and credentials via unspecified vectors.

Affected (24)

Products: Livetecs: Timeline

Livetecs

1 product

Timeline

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Livetecs Timeline	Version 2.81
Livetecs Timeline	Version 2.91
Livetecs Timeline	Version 2.94
Livetecs Timeline	Version 3.0.1
Livetecs Timeline	Version 3.0.3
Livetecs Timeline	Version 3.0.5
Livetecs Timeline	Version 3.1.1
Livetecs Timeline	Version 3.2.1
Livetecs Timeline	Version 3.5.1
Livetecs Timeline	Version 3.6.1
Livetecs Timeline	Version 3.7.1
Livetecs Timeline	Version 3.8.1
Livetecs Timeline	Version 4.2.1
Livetecs Timeline	Version 4.3.1
Livetecs Timeline	Version 4.9.1
Livetecs Timeline	Version 5.2.1
Livetecs Timeline	Version 6.0.1
Livetecs Timeline	Version 6.2.1
Livetecs Timeline	Version 6.2.3
Livetecs Timeline	Version 6.2.4
Livetecs Timeline	Version 6.2.6
Livetecs Timeline	Version 6.2.71
Livetecs Timeline	Version 6.2.7
Livetecs Timeline	Version 7.1.1