Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-26676 1 Aenrich 1 A\+hrd 2024-11-21 9.8 Critical
aEnrich a+HRD has inadequate privilege restrictions, an unauthenticated remote attacker can use the API function to upload and execute malicious scripts to control the system or disrupt service.
CVE-2022-26675 1 Aenrich 1 A\+hrd 2024-11-21 7.5 High
aEnrich a+HRD has inadequate filtering for special characters in URLs. An unauthenticated remote attacker can bypass authentication and perform path traversal attacks to access arbitrary files under website root directory.