PT-2022-8947
CVE-2020-36064
·
Published
2022-01-31
·
Updated
2022-02-04
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Online Course Registration version 1.0
Description
The issue concerns hardcoded credentials in the source code of the software, which could allow attackers to access the control panel if compromised.
Recommendations
For Online Course Registration version 1.0, remove the hardcoded credentials from the source code to prevent unauthorized access to the control panel. As a temporary workaround, consider restricting access to the control panel until the issue is resolved.
Found an issue in the description? Have something to add? Feel free to write us 👾