CVE-2023-3033

Mobatime web application is affected by CVE-2023-3033 due to incorrect authorization and misconfigured access control, enabling privilege escalation through versions up to 06.7.22. The product/component is Mobatime web app; root cause is broken/incorrect access control. Impact is privilege escala...

CVE-2023-3032

CVE-2023-3032 concerns the Mobatime web application, where an Unrestricted Upload of File with Dangerous Type vulnerability in the documentary proof upload modules allows a malicious user to upload a Web Shell to the web server. Affected versions are through 06.7.22. Available connected sources (...