Web Based Quiz System v1.0 transmits user passwords in plaintext during the authentication process, allowing attackers to obtain users passwords via a bruteforce attack.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Web_based_quiz_system | Web_based_quiz_system_project | 1.0 (including) | 1.0 (including) |