Travianz vulnerabilities

2 known vulnerabilities in Travianz from Travianz Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Travianz: Incorrect Authorization

  CVE-2023-36994Jul 7, 2023Travianz Project

  In TravianZ 8.3.4 and 8.3.3, Incorrect Access Control in the installation script allows an attacker to overwrite the server configuration and inject PHP code.

• 9.8 Critical severity

  Travianz: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2023-36993Jul 7, 2023Travianz Project

  The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts.