← Database

CVE-2022-22792

MEDIUM CVSS: 6.6 Published: 2022-02-16 Modified: 2026-06-17

Description

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users

Affected Platforms

Mobisoft - Mobiplus Project Mobisoft - Mobiplus

Weakness Type

CWE-233, NVD-CWE-Other

References