CVE-2018-12908 Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstra...
CriticalCVSS 9.8
EPSS 10.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a direct request for the /dashboard/deposit URI, as demonstrated by discovering database credentials.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| brynamics | All versions | No fix listed |
References
- cxsecurity.com exploit third-party-advisory
- 44977 exploit third-party-advisory vdb-entry