All packages
ORDAT FOSS-Online vulnerabilities
3 known CVE vulnerabilities in ORDAT FOSS-Online, translated and rated.
- CVE-2024-34336Medium
User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists by comparing server responses from the forgot password functionality.
- CVE-2024-34335Medium
ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected XSS vulnerability on the login page. An attacker can inject malicious script via a crafted request.
- CVE-2024-34334High
A SQL injection vulnerability was discovered in the forgot password function of ORDAT FOSS-Online before version 2.24.01. Attackers can exploit this flaw to manipulate database queries.