Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2022-22792

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCD

Description

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MobiSoft eharmony

  • MobiPlus to ≤ 1.0affected

References