VYPR

IRM Next Generation booking system

by IRM Next Generation

CVEs (1)

  • CVE-2023-39424CriSep 7, 2023
    risk 0.64cvss 9.9epss 0.01

    A vulnerability in RDPngFileUpload.dll, as used in the IRM Next Generation booking system, allows a remote attacker to upload arbitrary content (such as a web shell component) to the SQL database and execute it with SYSTEM privileges. This vulnerability requires authentication…