ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/171777/ENTAB-ERP-1.0-Information-Disclosure.html | Exploit Third Party Advisory VDB Entry |
| http://packetstormsecurity.com/files/171777/ENTAB-ERP-1.0-Information-Disclosure.html | Exploit Third Party Advisory VDB Entry |
Configurations
History
06 Feb 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-307 |
21 Nov 2024, 07:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/171777/ENTAB-ERP-1.0-Information-Disclosure.html - Exploit, Third Party Advisory, VDB Entry |
26 Apr 2023, 13:57
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| References | (MISC) http://packetstormsecurity.com/files/171777/ENTAB-ERP-1.0-Information-Disclosure.html - Exploit, Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:entab:erp:1.0:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-Other |
17 Apr 2023, 13:12
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-16 03:15
Updated : 2025-02-06 19:15
NVD link : CVE-2022-30076
Mitre link : CVE-2022-30076
CVE.ORG link : CVE-2022-30076
JSON object : View
Products Affected
entab
- erp
CWE