| Package | Affected versions | Patched versions |
|---|---|---|
| erp | = 1.0 |
ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free