EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information without being authenticated, by sending a LOGIN_ID element to the auth/main/asp/check_user_login_info.aspx URI, and then reading the response, as demonstrated by the KW_EMAIL or KW_TEL field.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-06-19T16:53:51

Updated: 2024-08-04T22:48:09.017Z

Reserved: 2019-04-15T00:00:00

Link: CVE-2019-11233

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-06-19T17:15:11.140

Modified: 2024-11-21T04:20:46.823

Link: CVE-2019-11233

cve-icon Redhat

No data.