CVE-2022-24240

Description

References

• aceware.com/forum/viewtopic.php · Release Notes

aceweb online portal의 다른 취약점

• CVE-2022-24581높음 7.5ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when …
• CVE-2022-24241높음 7.5ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter…
• CVE-2022-24239심각 9.8ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.
• CVE-2022-24238보통 6.1ACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS) vulnerability via the txtNmName1 parameter in person.awp…