← Back

Jiwa

jiwa

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Financials
financials
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-2719
1Jiwa
1Financials
Apr 16, 2026
Jun 1, 2006
N/A· v4
N/A· v3
4.9 MEDIUM· v2
JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HR_Staff table in Microsoft SQL Server, and sends the usernames and passwords in cleartext to the application's SQL Server ODBC d...Show more
JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HR_Staff table in Microsoft SQL Server, and sends the usernames and passwords in cleartext to the application's SQL Server ODBC driver, which might allow context-dependent attackers to obtain the passwords.Show less
CVE-2006-2718
1Jiwa
1Financials
Apr 16, 2026
Jun 1, 2006
N/A· v4
N/A· v3
6.5 MEDIUM· v2
JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard sto...Show more
JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrated by using a stored procedure that provides the username and cleartext password of every account.Show less