Total vulnerabilities in the database
ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting.
| Software | From | Fixed in |
|---|---|---|
| entab / erp | 1.0 | 1.0.x |