EUVD-2013-3530

Malware in sbrugna...

CVE-2013-3596

AdvancePro Advanceware allows remote authenticated users to obtain sensitive information about arbitrary customers' orders via a modified id parameter...

Design/Logic Flaw

AdvancePro Advanceware allows remote authenticated users to obtain sensitive information about arbitrary customers' orders via a modified id parameter...

CVE-2013-3596

AdvancePro Advanceware allows remote authenticated users to obtain sensitive information about arbitrary customers' orders via a modified id parameter...

CVE-2013-3596

AdvancePro Advanceware is affected by CVE-2013-3596. The vulnerability is a privilege bypass that allows remote authenticated users to view order information for other customers by manipulating the id parameter, causing information leakage (CWE-200). The issue arises from insufficient access cont...

PT-2013-4502

Name of the Vulnerable Software and Affected Versions AdvancePro Advanceware affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information about arbitrary customers' orders by modifying the id parameter. Recommendations At the moment, ther...

CVE-2013-3596: Undefined Security Weakness

AdvancePro Advanceware allows remote authenticated users to obtain sensitive information about arbitrary customers' orders via a modified id parameter...