Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Topline Opportunity Form (aka XLS Opp form) before 2015-02-15 does not properly restrict access to database-connection strings, which allows attackers to read the cleartext version of sensitive credential and e-mail address information via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Topline Opportunity Form 权限许可和访问控制漏洞
Vulnerability Description
Topline Opportunity Form是一套包含连接字符串为面向公众的数据库中启用宏的Excel电子表格制作工具。 Topline Opportunity Form 2015-02-15之前版本中存在安全漏洞，该漏洞源于程序没有限制对database-connection字符串的访问。攻击者可利用该漏洞读取敏感证书的明文版本号和e-mail地址信息。
CVSS Information
N/A
Vulnerability Type
N/A