Security Advisory

CVE-2018-19548

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-11-26 07:00:00

Last updated 2024-08-05 11:37:11

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

index.php?r=site%2Flogin in EduSec through 4.2.6 does not restrict sending a series of LoginForm[username] and LoginForm[password] parameters, which might make it easier for remote attackers to obtain access via a brute-force approach.

← Browse all CVEs View on cve.org ↗