3 matches found
Authentication flaw
The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...
7.5CVSS7.4AI score0.01514EPSS
SaveExploits0References2Affected Software1
CVE-2011-4068: Improper Authentication
The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...
9.8CVSS8.3AI score0.01514EPSS
SaveExploits0References2
CVE-2011-4069: Improper Neutralization of Special Elements used in an LDAP Query
html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username...
9.8CVSS8.3AI score0.01555EPSS
SaveExploits0References2
20