Design/Logic Flaw

MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information e.g., a CPF number via a modified titulo aka invoice number value to the central/recibo.php URI...

CVE-2021-3005: Undefined Security Weakness

MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information e.g., a CPF number via a modified titulo aka invoice number value to the central/recibo.php URI...

PT-2021-18587

Name of the Vulnerable Software and Affected Versions MK-AUTH versions through 19.01 K4.9 Description The issue allows remote attackers to obtain sensitive information, such as a CPF number, by modifying the titulo also known as invoice number value in the "central/recibo.php" URI. Recommendation...