PT-2026-146032

Name of the Vulnerable Software and Affected Versions XWEB EVO versions 5.6.2 through 5.8.8 Description The Administrator web account is configured to use password mode daily password without a stored password. This occurs because the authenticate function in lualib users.lua synthesizes the...