3 matches found
CVE-2020-8988
The Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes it easier for attackers after using root access to make a copy of the local database to discover login credentials and voting history via an offline brute-force approach...
Privilege escalation
The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...
CVE-2008-7056
BandSite CMS 1.1.4 is affected by CVE-2008-7056 due to missing access control on adminpanel/phpmydump.php, enabling remote attackers to directly request the file and obtain copies of the database. This is documented across NVD/NVD-CVE records and related CVE aggregations. The available descriptio...