Foiaxpress Public Access Link (Pal)
Approved changes feed: RSS · Atom
cpe:2.3:a:opexus:foiaxpress_public_access_link_(pal):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Opexus (399fd120-a70a-539f-9287-96058bb78107) |
|---|---|
| Product | Foiaxpress Public Access Link (Pal) (5db271cc-9bd2-5b0f-9416-dc21fe4ea985) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-58462 |
vulnerable | 2026-06-08 07:35:18.320891 |
OPEXUS FOIAXpress PAL SQL injection
CRITICAL (9.8)
OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database.
Published: 2025-09-09T21:09:48.098Z
Updated: 2026-02-26T17:48:47.966Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54834 |
vulnerable | 2026-06-08 07:33:13.464195 |
OPEXUS FOIAXpress Public Access Link (PAL) unauthenticated username enumeration
MEDIUM (5.3)
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query the /App/CreateRequest.aspx endpoint to check for the existence of valid usernames. There are no rate-limiting mechanisms in place.
Published: 2025-07-31T17:26:04.606Z
Updated: 2025-07-31T18:16:59.684Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54833 |
vulnerable | 2026-06-08 07:33:13.463835 |
OPEXUS FOIAXpress Public Access Link (PAL) account-lockout and CAPTCHA protection bypass
MEDIUM (5.3)
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPTCHA protections. Unauthenticated remote attackers can more easily brute force passwords.
Published: 2025-07-31T17:26:31.457Z
Updated: 2025-08-07T18:49:33.918Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54832 |
vulnerable | 2026-06-08 07:33:13.462865 |
OPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modification
MEDIUM (4.3)
OPEXUS FOIAXpress Public Access Link (PAL), version v11.1.0, allows an authenticated user to add entries to the list of states and territories.
Published: 2025-07-31T17:25:27.272Z
Updated: 2025-08-07T18:45:45.102Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.