Webvendome Security Vulnerabilities - February

CVE-2022-36787

webvendome - webvendome SQL Injection.SQL Injection in the Parameter " DocNumber"Request :Get Request :/webvendome/showfiles.aspx?jobnumber=nullDoc Number=HERE.

CVE-2022-39178

Webvendome - webvendome Internal Server IP Disclosure.Send GET Request to the request which is shown in the picture.Internal Server IP and Full path disclosure.