CVE-2022-22792

CVE-2022-22792 concerns MobiSoft MobiPlus. The vulnerability arises from an improper handling of URL parameters in the web handler; specifically, an attacker could navigate to a crafted URL such as /MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users to expose all users and p...