1 matches found
pass2pdf - Critical - Information Disclosure - Unsupported - SA-CONTRIB-2015-109
This module allows you to let users set a password upon registering, and have the password emailed to the user in a PDF file. The module has an Information Disclosure vulnerability. The generated PDF files are not protected. The user passwords are exposed to anonymous users. CVE identifiers issue...
5CVSS6.5AI score0.01381EPSS
SaveExploits0References9
20