CVE-2020-28115

AudimexEE’s CVE-2020-28115 is a SQL injection in the Documents component of version 14.1.0, exploitable via the object_path parameter. Multiple connected sources corroborate: CNVD-2020-65171 states the vulnerability exists in AudimexEE versions prior to 14.1.1, implying a fixed version is 14.1.1....

CVE-2020-28047

AudimexEE before 14.1.1 is vulnerable to Reflected XSS. If the security parameter unique_error_numbers is not set, remote attackers can inject script/HTML via action, cargo, panel parameters, potentially causing data leakage. Affected product: AudimexEE; vulnerable component/entry points are the ...