MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users
The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mobisoft_-_mobiplus | Mobisoft_-_mobiplus_project | - (including) | - (including) |