CVE-2022-22792: Mobisoft - Mobiplus Project Mobisoft - Mobiplus
High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.
MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users
Affected products
- Mobisoft - Mobiplus Project Mobisoft - Mobiplus: affected versions not specified
Published 2022-02-16. Last modified 2026-06-17.