Arbitrary File Download Vulnerability in AmarALS Credit Risk Management System

AmarALS Credit Risk Management System is a "Credit Risk Management Support System" covering all aspects of credit risk management for commercial banks. An arbitrary file download vulnerability exists in the AmarALS Credit Risk Management System, which can be exploited by an attacker to download...

XML Entity Injection Vulnerability in AmarALS Credit Risk Management System (CNVD-2021-35798)

AmarALS Credit Risk Management System is a "Credit Risk Management Support System" covering all aspects of credit risk management for commercial banks. An XML entity injection vulnerability exists in the AmarALS Credit Risk Management System, which could be exploited by an attacker to obtain...

XML Entity Injection Vulnerability in AmarALS Credit Risk Management System

AmarALS Credit Risk Management System is a "Credit Risk Management Support System" covering all aspects of credit risk management for commercial banks. An XML entity injection vulnerability exists in the AmarALS Credit Risk Management System, which could be exploited by an attacker to obtain...