CVE-2022-42749中 6.1CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is po…
CVE-2022-42748中 6.1CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. T…
CVE-2022-42747中 6.1CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is …
CVE-2022-42746中 6.1CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This …
CVE-2022-42744緊急 9.8CandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application databases. This is possible because the ap…