CVE-2022-29597

CVE-2022-29597: Lokale Dateieinbindung in RSS v500 Die RRS v500-Anwendung von Solutions Atlantic ist anfällig für eine Local File Inclusion LFI-Schwachstelle. Jeder authentifizierte Benutzer hat die Möglichkeit, interne Systemdateien in Anfragen an die Seite...

CVE-2022-29598

CVE-2022-29598 : Cross-Site Scripting XSS Refletido no RSS v500 URL Mitre: https://vulners.com/cve/CVE-2022-29598 URL NIST: https://nvd.nist.gov/vuln/detail/CVE-2022-29598 A aplicação RRS v500 da Solutions Atlantic é vulnerável a uma vulnerabilidade de Cross-Site Scripting XSS refletido. A...

CVE-2022-29597

CVE-2022-29597 affects Solutions Atlantic Regulatory Reporting System (RRS) v500. It exposes a Local File Inclusion (LFI) vulnerability via the ShowDocument/ShowDocument.aspx page, where an authenticated user can abuse the fileName parameter to reference internal system files (eg. web.config) and...

CVE-2022-29598

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to an reflected Cross-Site Scripting XSS vulnerability via RRSWeb/maint/ShowDocument/ShowDocument.aspx...