CVE-2022-29597: Improper Limitation of a Pathname to a Restricted Directory

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to Local File Inclusion LFI. Any authenticated user has the ability to reference internal system files within requests made to the RRSWeb/maint/ShowDocument/ShowDocument.aspx page. The server will successfully respond with the...

CVE-2022-29598: Improper Neutralization of Input During Web Page Generation

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to an reflected Cross-Site Scripting XSS vulnerability via RRSWeb/maint/ShowDocument/ShowDocument.aspx...