Approved changes feed: RSS · Atom

cpe:2.3:a:nway:nway_pro:9:*:*:*:*:*:*:*

part: a version: 9 update: *

VendorNway (726ab906-2009-597e-b8f6-af97c0ce17b0)
ProductNway Pro (46357724-b0ca-5d28-b38a-c2c4165bd204)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2009 vulnerable 2026-06-08 06:33:30.122019 Nway Pro Argument index.php ajax_login_submit_form information exposure
MEDIUM (5.3)
A vulnerability was found in Nway Pro 9. It has been rated as problematic. Affected by this issue is the function ajax_login_submit_form of the file login\index.php of the component Argument Handler. The manipulation of the argument rsargs[] leads to information exposure through error message. The attack may be launched remotely. VDB-255266 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-02-29T18:31:05.718Z
Updated: 2024-08-13T13:40:21.515Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.