CVE-2022-29597

CVE-2022-29597: Local File Inclusion in RSS v500 The RRS v500 application by Solutions Atlantic is vulnerable to a Local File Inclusion LFI vulnerability. Any authenticated user has the ability to reference internal system files within requests made to the...

CVE-2022-29598

CVE-2022-29598 : Cross-Site Scripting XSS Reflejado en RSS v500 URL de Mitre: https://vulners.com/cve/CVE-2022-29598 URL de NIST: https://nvd.nist.gov/vuln/detail/CVE-2022-29598 La aplicación RRS v500 de Solutions Atlantic es vulnerable a una vulnerabilidad de Cross-Site Scripting XSS reflejado. ...

CVE-2022-29597

CVE-2022-29597 affects Solutions Atlantic Regulatory Reporting System (RRS) v500. It exposes a Local File Inclusion (LFI) vulnerability via the ShowDocument/ShowDocument.aspx page, where an authenticated user can abuse the fileName parameter to reference internal system files (eg. web.config) and...

CVE-2022-29598

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to an reflected Cross-Site Scripting XSS vulnerability via RRSWeb/maint/ShowDocument/ShowDocument.aspx...