CVE-2024-34334

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function...

CVE-2024-34334

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function...

CVE-2024-34334

CVE-2024-34334 affects ORDAT FOSS-Online prior to version 2.24.01. The issue is a SQL injection vulnerability exploitable via the Forgot Password function. Red Hat and other sources corroborate the impact, with the underlying flaw enabling unauthorized access to confidential data (as per CVSS and...

CVE-2024-34335

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting XSS vulnerability via the login page...