Default credentials

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants...

Directory traversal

A weak permission was found in the backup directory in LaborOfficeFree affecting version 19.10. This vulnerability allows any authenticated user to read backup files in the directory '%programfilesx86% LaborOfficeFree BackUp'...

CVE-2024-1346 Weak MySQL database root password in LaborOfficeFree

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants...

CVE-2024-1346 Weak MySQL database root password in LaborOfficeFree

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants...

CVE-2024-1346

CVE-2024-1346 affects LaborOfficeFree 19.10, where the MySQL root password is weak and can be calculated from two constants. The issue is local-attack feasible (local access required) with a low attack complexity and high confidentiality impact; documented exploit references exist (e.g., Exploit-...

CVE-2024-1345 Weak MySQL database root password in LaborOfficeFree

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to perform a brute force attack and easily discover the root password...

CVE-2024-1345 Weak MySQL database root password in LaborOfficeFree

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to perform a brute force attack and easily discover the root password...

CVE-2024-1345

CVE-2024-1345 affects LaborOfficeFree v19.10 with a weak MySQL database root password that enables brute-force discovery of the root password. The vulnerability arises from weak password requirements, allowing local attackers to brute-force the root credential. From the available connected docume...

CVE-2024-1344

CVE-2024-1344 affects LaborOfficeFree v19.10. The vulnerability allows reading/extracting database usernames and passwords from the LOF_service.exe/LaborOfficeFree.exe databases located under %programfiles(x86)%. An attacker could log in remotely with root-like privileges. Affected executables LO...

CVE-2024-1344 Encrypted database credentials in LaborOfficeFree

Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOFservice.exe' and 'LaborOfficeFree.exe' located in the '%programfilesx86%\LaborOfficeFree' directory. This user ca...

CVE-2024-1344 Encrypted database credentials in LaborOfficeFree

Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOFservice.exe' and 'LaborOfficeFree.exe' located in the '%programfilesx86%\LaborOfficeFree' directory. This user ca...

CVE-2024-1343 Weak permission vulnerability in LaborOfficeFree

A weak permission was found in the backup directory in LaborOfficeFree affecting version 19.10. This vulnerability allows any authenticated user to read backup files in the directory '%programfilesx86% LaborOfficeFree BackUp'...

CVE-2024-1343

CVE-2024-1343 concerns LaborOfficeFree, version 19.10. A weak permission in the backup directory (path: %programfiles(x86)% LaborOfficeFree BackUp) allows any authenticated user to read backup files, enabling potential disclosure of backup data. Documents consistently cite an access-control weakn...

CVE-2024-1343 Weak permission vulnerability in LaborOfficeFree

A weak permission was found in the backup directory in LaborOfficeFree affecting version 19.10. This vulnerability allows any authenticated user to read backup files in the directory '%programfilesx86% LaborOfficeFree BackUp'...

PT-2024-4032 · Unknown · Laborofficefree

Name of the Vulnerable Software and Affected Versions: LaborOfficeFree version 19.10 Description: The issue affects the executable files LOF service.exe and LaborOfficeFree.exe, allowing an attacker to read and extract the username and password from the database. This can lead to unauthorized...

PT-2024-3907 · Unknown · Laborofficefree

Name of the Vulnerable Software and Affected Versions: LaborOfficeFree version 19.10 Description: The issue is related to inadequate access control in the backup directory of LaborOfficeFree, allowing any authenticated user to read backup files in the directory '%programfilesx86% LaborOfficeFree...

LaborOfficeFree Security Vulnerability

LaborOfficeFree is a free Turnos management and Presencia control software from LaborOfficeFree. A security vulnerability exists in LaborOfficeFree version 19.10, which stems from a vulnerability that allows an attacker to brute-force break the root password...

LaborOfficeFree Access Control Error Vulnerability

LaborOfficeFree is a free Turnos management and Presencia control software from LaborOfficeFree. An access control error vulnerability exists in LaborOfficeFree version 19.10 that originates from allowing an authenticated user to read backup files in a directory...

LaborOfficeFree Security Vulnerability

LaborOfficeFree is a free Turnos management and Presencia control software from LaborOfficeFree. A security vulnerability exists in LaborOfficeFree version 19.10 that originates from a vulnerability that allows an attacker to calculate the root password of a MySQL database using two constants...

LaborOfficeFree Security Vulnerability

LaborOfficeFree is a free Turnos management and Presencia control software from LaborOfficeFree. LaborOfficeFree version 19.10 suffers from a security vulnerability that stems from allowing an attacker to read usernames and passwords from the database...