Cdatatec Web Management System vulnerabilities

CVE-2023-3305 [HIGH] CWE-284 CVE-2023-3305: A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. It is possible to initia