Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2023-36994

Disclosure Date: July 07, 2023 (last updated February 25, 2025)
In TravianZ 8.3.4 and 8.3.3, Incorrect Access Control in the installation script allows an attacker to overwrite the server configuration and inject PHP code.
Attacker Value
Unknown

CVE-2023-36993

Disclosure Date: July 07, 2023 (last updated February 25, 2025)
The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts.
Attacker Value
Unknown

CVE-2023-36992

Disclosure Date: July 07, 2023 (last updated February 25, 2025)
PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code.