Windows System Information 6.1.7601 XXE Injection

Windows System Information MSINFO32.exe version 6.1.7601 suffers from an XML external entity (XXE) injection vulnerability that allows for file exfiltration.

Leave a Reply