CVE-2024-34334

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function...

CVE-2024-34335

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting XSS vulnerability via the login page...

CVE-2024-34336

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality...

CVE-2024-34336

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality...

CVE-2024-34334

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function...

CVE-2024-34334

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function...

CVE-2024-34336

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality...

CVE-2024-34335

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting XSS vulnerability via the login page...

CVE-2024-34335

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting XSS vulnerability via the login page...

ORDAT FOSS-Online 安全漏洞

ORDAT FOSS-Online is an enterprise resource management solution from ORDAT. A security vulnerability exists in ORDAT FOSS-Online prior to 2.24.01, which stems from the presence of a user enumeration vulnerability that could allow an attacker to determine if an account exists in the application by...

CVE-2024-34335

ORDAT FOSS-Online prior to version 2.24.01 contains a reflected XSS in the login page. The CVE notes a low- to moderate-severity impact (CVSS ~6.1) with confidentiality/integrity impact and no availability impact. Affected component is ORDAT FOSS-Online login handling; root cause is a reflected X...

CVE-2024-34334: Improper Neutralization of Special Elements used in an SQL Command

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function...

PT-2024-25792 · Unknown · Ordat Foss-Online

Name of the Vulnerable Software and Affected Versions: ORDAT FOSS-Online versions prior to 2.24.01 Description: The issue is related to a SQL injection vulnerability in the forgot password function. Recommendations: For versions prior to 2.24.01, update to version 2.24.01 or later to resolve the...

CVE-2024-34335

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting XSS vulnerability via the login page...

CVE-2024-34334

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function...

CVE-2024-34335: Improper Neutralization of Input During Web Page Generation

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting XSS vulnerability via the login page...

CVE-2024-34336

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality...

PT-2024-25794 · Unknown · Ordat Foss-Online

Name of the Vulnerable Software and Affected Versions: ORDAT FOSS-Online versions prior to 2.24.01 Description: A user enumeration issue exists, allowing attackers to determine if an account exists in the application by comparing server responses of the forgot password functionality...

CVE-2024-34334

The enterprise resource management solution ORDAT FOSS-Online is vulnerable to a SQL injection in versions prior to v2.24.01 . The flaw exists within the forgot password function , which could allow an attacker to execute unauthorized SQL commands. To remediate this issue, users should update to ...

CVE-2024-34336

CVE-2024-34336 affects ORDAT FOSS-Online prior to v2.24.01, where the forgot-password responses enable user enumeration: an attacker can tell whether an account exists by comparing server responses. Root cause is disclosure through authentication-related feedback in the forgot password flow. Publ...