Aethra SV2242E XXE Injection Vulnerability

Aethra SV2242E suffers from an XML external entity injection vulnerability. Author : Ahmed Sultan Email : email protected Vuln. software : Aethra SV2242E Vendor site : aethra.it CVE : Requested , but haven't been assigned yet tested on : ATOS 5.6.x The bug rise because of the remote user input to...

Aethra SV2242E XXE Injection

Author : Ahmed Sultan Email : [email protected] Vuln. software : Aethra SV2242E Vendor site : aethra.it CVE : Requested , but haven't been assigned yet tested on : ATOS 5.6.x The bug rise because of the remote user input to "/cgi-bin/AmiWeb" is not sensitized before being parsed which cause the...