2 matches found
CVE-2022-34551
Sims v1.0 was discovered to allow path traversal when downloading attachments.
CVE-2022-34549
Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet. This vulnerability allows attackers to escalate privileges and execute arbitrary commands via a crafted file.