CVE-2022-22789

Charactell FormStorm Enterprise contains a vulnerability where an attacker can modify the passwords file (xx_users.ini) used for all users, enabling account takeover. The xx_users.ini stores usernames in cleartext and an obfuscated password, allowing a malicious user to replace an existing passwo...