PT-2022-15893

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue involves an attacker crafting a GET request to the /mobile/downloadfile.aspx endpoint with a Filename parameter set to ../.. /windows/boot.ini,...

CVE-2022-23167: Undefined Security Weakness

Attacker crafts a GET request to: /mobile/downloadfile.aspx? Filename =../.. /windows/boot.ini the LFI is UNAUTHENTICATED...