TI-2022-08430 CVE-2022-24581 · GHSA-vg7h-w623-47v4
ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC.
Priority LOW 35
ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC.
Vulnerabilities
5 records
TI-2022-08144 CVE-2022-24241 · GHSA-f62f-hw25-5gjf
ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path…
Priority LOW 35
ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter in attachments.awp.
TI-2022-08143 CVE-2022-24240 · GHSA-xv3j-5xmw-q95p
ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via…
Priority MEDIUM 44
ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the criteria parameter in showschedule.awp.
TI-2022-08142 CVE-2022-24239 · GHSA-5h88-x8r9-rm43
ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.
Priority MEDIUM 44
ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.
TI-2022-08141 CVE-2022-24238 · GHSA-9w8h-4p4g-6v5h
ACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS)…
Priority LOW 28
ACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS) vulnerability via the txtNmName1 parameter in person.awp.