CVE-2022-22149

A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

Sql injection

A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2022-22149

Lansweeper 9.1.20.2 contains an SQL injection in the HelpdeskSetupActions.EditSetting path (HelpdeskSetupActions.cs) where the field value is concatenated into a SQL query without proper sanitization. Exploitation requires authentication with rights to change settings (Configuration -> HelpDes...

CVE-2022-22149: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

PT-2022-15274

Name of the Vulnerable Software and Affected Versions Lansweeper version 9.1.20.2 Description A SQL injection issue exists in the HelpdeskEmailActions.aspx functionality. This can be triggered by a specially-crafted HTTP request, allowing an attacker to cause SQL injection through an authenticate...