10 matches found
CVE-2024-34334
ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function...
CVE-2024-34335
ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting XSS vulnerability via the login page...
CVE-2024-34335
ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting XSS vulnerability via the login page...
CVE-2024-34336
User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality...
CVE-2024-34335
ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting XSS vulnerability via the login page...
PT-2024-25793 · Unknown · Ordat Foss-Online
Name of the Vulnerable Software and Affected Versions: ORDAT FOSS-Online versions prior to 2.24.01 Description: A reflected cross-site scripting XSS vulnerability was discovered in the login page of ORDAT FOSS-Online. This issue allows for the execution of malicious scripts, potentially leading t...
PT-2024-25792 · Unknown · Ordat Foss-Online
Name of the Vulnerable Software and Affected Versions: ORDAT FOSS-Online versions prior to 2.24.01 Description: The issue is related to a SQL injection vulnerability in the forgot password function. Recommendations: For versions prior to 2.24.01, update to version 2.24.01 or later to resolve the...
CVE-2024-34335
ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting XSS vulnerability via the login page...
CVE-2024-34335
ORDAT FOSS-Online prior to version 2.24.01 contains a reflected XSS in the login page. The CVE notes a low- to moderate-severity impact (CVSS ~6.1) with confidentiality/integrity impact and no availability impact. Affected component is ORDAT FOSS-Online login handling; root cause is a reflected X...
CVE-2024-34334
ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function...