CVE-2022-44784 - Vulnerabilities in Appalti & Contratti 9.12.2 Lead to Remote Access of Axis AdminService and Arbitrary Service Creation
An issue was recently discovered in Appalti & Contratti, a web application used for managing contracts and tenders. The vulnerability, found in version 9.12.2,
CVE-2022-44785: Uncovering SQL Injection Vulnerabilities in Appalti & Contratti 9.12.2, Exploit Details, and Recommendations
Security researchers recently discovered an issue in the Appalti & Contratti 9.12.2 web application suite that enables attackers to exploit multiple SQL Injection vulnerabilities,