CVE-2019-19160

CVE-2019-19160 affects Capsoft Reportexpress ProPlus (Web reporting solution). The connected sources confirm a vulnerability that could allow arbitrary code execution by inserting VBScript into the configure file (rxp). Reported root cause involves a lack of integrity validation in Reportexpress ...