Amtote International : Security Vulnerabilities, CVEs,
AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack.
Max CVSS
5.0
EPSS Score
18.89%
Published
2001-12-31
Updated
2008-09-05
AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers.
Max CVSS
5.0
EPSS Score
1.90%
Published
2001-09-29
Updated
2017-12-19
2 vulnerabilities found