ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function.

Published Sep 12, 2024 · Updated Jul 5, 2026 · Assigned by mitre