Lucene search
PRIOn knowledge basePRION:CVE-2022-44016HistoryDec 25, 2022 - 5:15 a.m.
Design/Logic Flaw
2022-12-2505:15:00
PRIOn knowledge base
www.prio-n.com
2
simmeth lieferantenmanager
arbitrary file download
api call
An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can download arbitrary files from the web server by abusing an API call: /DS/LM_API/api/ConfigurationService/GetImages with an ‘“ImagesPath”:“C:\”’ value.
| CPE | Name | Operator | Version |
|---|---|---|---|
| lieferantenmanager | lt | 5.6 |
Related
nvd
nvd
CVE-2022-44016
2022-12-25 05:15:10
cnvd
cnvd
Simmeth System Supplier Manager Arbitrary File Download Vulnerability
2022-11-21 00:00:00
cvelist
cvelist
CVE-2022-44016
2022-12-25 00:00:00
cve
cve
CVE-2022-44016
2022-12-25 05:15:10
packetstorm
packetstorm
Simmeth System GmbH Supplier Manager LFI / SQL Injection / Bypass
2022-11-15 00:00:00
zdt
zdt