CVE-2022-24238

概要

参考情報

• aceware.com/forum/viewtopic.php · Release Notes

aceweb online portal のその他の脆弱性

• CVE-2022-24581高 7.5ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when …
• CVE-2022-24241高 7.5ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter…
• CVE-2022-24240緊急 9.8ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the criteria parameter in showschedule.awp.
• CVE-2022-24239緊急 9.8ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.