The vulnerability of the PlatformHandler.axd handler in the “Project-SMARTPRO” software platform and the “S-SMARTPRO” software suite is related to an incorrect limitation on the path name to the catalog. This allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PlatformHandler.axd component in the automated information system “Web-Torghi KS” and the software suite “Budget-NEXT” is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability can allow a malicious actor to gain unauthorized...