THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-70146 (CRITICAL 9.1) — Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations (e.g.,adding records, deleting records) via direct HTTP requests to affected e

[NVD] CVE-2025-70146 (CRITICAL 9.1) — Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations (e.g.,adding records, deleting records) via direct HTTP requests to affected e

lownvdPublished 2026-02-18

CVE-2025-70146 CVSS: 9.1 CRITICAL Published: 2026-02-18T17:21:35.853

Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations (e.g.,adding records, deleting records) via direct HTTP requests to affected endpoints without a valid session.

Indicators of compromise

CVE-2025-70146cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-70146