Travianz Project vulnerabilities
We track 2 vulnerabilities in Travianz Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 7, 2023.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Travianz Project vulnerabilities
- 9.8 Critical severity
Travianz: Incorrect Authorization
In TravianZ 8.3.4 and 8.3.3, Incorrect Access Control in the installation script allows an attacker to overwrite the server configuration and inject PHP code.
- 9.8 Critical severity
Travianz: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts.