Design/Logic Flaw

HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique...

PT-2013-5445

Name of the Vulnerable Software and Affected Versions HR Systems Strategies info:HR HRIS version 7.9 Description The issue allows local users to bypass intended database restrictions. This is achieved by accessing the USERPW registry key and bypassing an unspecified obfuscation technique, which...

CVE-2013-5208: Undefined Security Weakness

HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique...

OTRS Information Disclosure Vulnerability (Mar 2011)

Open Ticket Request System OTRS is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-1433

The 1 AgentInterface and 2 CustomerInterface components in Open Ticket Request System OTRS before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the UserLogin and UserPW fiel...

CVE-2005-0882: Undefined Security Weakness

SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 userid or 2 userpw parameters...