CVE-2018-15718 - AskarLabs CVE Database

CVE-2018-15718

Vendor Open Dental

Product Open Dental

Weakness CWE-200 · Info exposure

Published December 12, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more.

Key dates

02Disclosure timeline

December 12, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-15718 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/200.html

Related vulnerabilities

04Related CVE

CVE-2020-25836 Potential information leakage resulting in unauthorized access CVE-2024-49284 WordPress WP SendFox plugin <= 1.3.1 - Sensitive Data Exposure vulnerability CVE-2024-27286 Moving single messages from public to private streams leaves them accessible CVE-2024-43258 WordPress Store Locator Plus® for WordPress plugin <= 2311.17.01 - Sensitive Data Exposure vulnerability CVE-2024-8461 D-Link DNS-320 Web Management Interface discovery.cgi information disclosure