267 matches found
CVE-2019-10641
Contao contains a session invalidation flaw: existing user sessions are not properly invalidated when a password is changed. Affected versions include Contao 3.* up to 3.5.38 and Contao 4.x up to 4.7.2, with the fix released in Contao 3.5.39, 4.4.37, or 4.7.3. The issue, identified in CVE-2019-10...
CVE-2019-10641
Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password...
CVE-2018-1000812
Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Password recovery process, line 45 of general/passwordrecovery.php that can result in IntegriaIMS web app user accounts can be take...
Design/Logic Flaw
Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Password recovery process, line 45 of general/passwordrecovery.php that can result in IntegriaIMS web app user accounts can be take...
CVE-2018-1000812
The CVE-2018-1000812 entry concerns Artica Integria IMS (versions around 5.0 MR56 Package 58 and likely earlier) with a CWE-640 Weak Password Recovery Mechanism in the Password recovery process. The vulnerability in general/password_recovery.php (line 45) can allow takeover of IntegriaIMS web app...
CVE-2018-1000812
Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Password recovery process, line 45 of general/passwordrecovery.php that can result in IntegriaIMS web app user accounts can be take...