← CVE Intelligence

CVE-2022-22792

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters PUBLISHED

Description (CNA)

MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users

Affected (CNA)

Vendor / productVersions
MobiSoft / eharmonyaffected MobiPlus through 1.0

CWE

CWE-233

References

ADP enrichment

CVE

No English description supplied.