Vendors / Cale Dunlap Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Cale Dunlap records in CISA KEV No Cale Dunlap vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02561 · Published 2009-03-25 · No fix listed CWE-287
Priority LOW 33
resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter.
CVSS 2.0 MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.02037 · Published 2009-03-25 · No fix listed CWE-255
Open these records in search → All records by CVSS severity
0 1 1 0 0
