CVE-2022-33035

Description

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.

Affected Platforms

Weakness Type

CWE-427

References

• https://github.com/ycdxsb/Vuln/blob/main/Xlpd-Unquoted-Service-Path/XLpd-Unquote…
• https://www.netsarang.com/en/xlpd-update-history/
• https://github.com/ycdxsb/Vuln/blob/main/Xlpd-Unquoted-Service-Path/XLpd-Unquote…
• https://www.netsarang.com/en/xlpd-update-history/