This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-19966 | BDVDB-2026-360446 Detail

CodeCanyonTimeCamp Integration for CRM

Description#

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save_contact of the component Contact Information Update. Such manipulation of the argument contact_id leads to authorization bypass. The attack can be launched remotely. The exploit is publicly available and might be used.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-639 Authorization Bypass Through User-Controlled Key
  • CWE-285 Improper Authorization

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.