CVE-2025-51627: Improper Access Control

Incorrect access control in CaricaVerbale in Agenzia Impresa Eccobook v2.81.1 allows authenticated attackers with low-level access to escalate privileges to Administrator...

CVE-2025-51628

An Insecure Direct Object Reference (IDOR) vulnerability exists in the PdfHandler component of Agenzia Impresa Eccobook (versions v2.81.1 and below). This flaw allows unauthenticated attackers to read confidential documents by manipulating the DocumentoId parameter. To mitigate this risk, it is r...