PT-2019-12207

Name of the Vulnerable Software and Affected Versions EXCELLENT INFOTEK BiYan versions 1.57 through 2.8 Description The issue allows an attacker to leak user information without authentication by sending a LOGIN ID element to the "auth/main/asp/check user login info.aspx" API endpoint and then...