Skip to content
OpenAdvisories

Vendor

Resort Data Processing

5 known vulnerabilities.

Products

IRM Next Generation 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2023-39424

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in RDPngFileUpload.dll

    A vulnerability in RDPngFileUpload.dll, as used in the IRM Next Generation booking system, allows a remote attacker to upload arbitrary content (such as a web shell component) to the SQL database and execute it with SYSTEM privileges. This vulnerability requi…

    Resort Data Processing IRM Next Generation
  • Critical 9.9
    CVE-2023-39420

    Use of Hard-coded Credentials in RDPCore.dll

    The RDPCore.dll component as used in the IRM Next Generation booking engine, allows a remote user to connect to customers with an "admin" account and a corresponding password computed daily by a routine inside the DLL file. Once reverse-engineered, this routi…

    Resort Data Processing IRM Next Generation