CVE-2022-22792

Publication date

2022-02-16 16:38:07

Family

INCD

State

PUBLISHED

Description

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users