Filtered by vendor Ordat Subscriptions
Filtered by product Ordat.erp Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-34334 1 Ordat 2 Foss-online, Ordat.erp 2024-09-18 9.3 Critical
ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function.
CVE-2024-34335 1 Ordat 2 Foss-online, Ordat.erp 2024-09-18 6.1 Medium
ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page.
CVE-2024-34336 1 Ordat 2 Foss-online, Ordat.erp 2024-09-18 5.3 Medium
User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality.