Ordat Ordat.erp
3 CVEs affecting Ordat Ordat.erp. Latest disclosed: 2024-09-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-34334 | High | 7.5 | 2024-09-12 | ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function. |
CVE-2024-34335 | Medium | 6.1 | 2024-09-12 | ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page. |
CVE-2024-34336 | Medium | 5.3 | 2024-09-12 | User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the serv… |