CVE-2022-39178

CVE-2022-39178 pertains to Webvendome and describes an internal server IP and full path disclosure triggered by a GET request, suggesting a path traversal-related issue. The connected sources consistently reference Webvendome’s internal IP disclosure via a specific endpoint, but the documents do ...

CVE-2022-36787

CVE-2022-36787 concerns Webvendome and is a SQL Injection vulnerability in the GET parameter that populates the DocNumber on the /webvendome/showfiles.aspx endpoint. Technical details from connected documents describe the injection vector via the DocNumber parameter (e.g., /webvendome/showfiles.a...