| Package | Affected versions | Patched versions |
|---|---|---|
| lieferantenmanager | < 5.6 | 5.6 |
An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can log back into a victim's account after the victim logged out - /LMS/LM/#main can be used for this. This is due to the credentials not being cleaned from the local storage after logout.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free