TI-2025-36219 CVE-2025-58462 · GHSA-6v2c-hxhp-8jx7
OPEXUS FOIAXpress PAL SQL injection
Priority MEDIUM 49
OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx.
Vulnerabilities
5 records
TI-2025-34579 CVE-2025-54833 · GHSA-p9p4-h5gm-3hf5
OPEXUS FOIAXpress Public Access Link (PAL) account-lockout and CAPTCHA protection bypass
Priority LOW 37
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPTCHA protections.
TI-2025-34580 CVE-2025-54834 · GHSA-989f-fh5x-8jw4
OPEXUS FOIAXpress Public Access Link (PAL) unauthenticated username enumeration
Priority HIGH 70
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query the /App/CreateRequest.aspx endpoint to check for the existence of valid usernames.
TI-2025-34578 CVE-2025-54832 · GHSA-w5m4-3739-7jcj
OPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modification
Priority MEDIUM 57
OPEXUS FOIAXpress Public Access Link (PAL), version v11.1.0, allows an authenticated user to add entries to the list of states and territories.
TI-2024-35836 CVE-2024-53553 · GHSA-hr74-5gwv-789v
An issue in OPEXUS FOIAXPRESS PUBLIC ACCESS LINK v11.1.0 allows attackers to bypass…
Priority HIGH 80
An issue in OPEXUS FOIAXPRESS PUBLIC ACCESS LINK v11.1.0 allows attackers to bypass authentication via crafted web requests.