3 matches found
EUVD-2026-56232
CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that allows any authenticated user to access any other user's profile data by supplying an arbitrary user ID parameter. Attackers can send a GET request to the admin profile endpoint...
5.3CVSS5.3AI score0.00342EPSS
SaveExploits0References4
EUVD-2017-3857
Malware in sbrugna...
5.5CVSS6AI score0.00357EPSS
SaveExploits0References4
CVE-2005-0899: Undefined Security Weakness
AS/400 running OS400 5.2 installs and enables LDAP by default, which allows remote authenticated users to obtain OS/400 user profiles by performing a search...
2.1CVSS5.8AI score0.00478EPSS
SaveExploits0References1
20