CVE-2019-18955

The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been fixed and disclosed within changelog as of 02 Dec 2019...

Lansweeper Arbitrary Code Execution Vulnerability

Lansweeper is a network-assisted software that lists Windows hardware from Lansweeper Belgium. An arbitrary code execution vulnerability exists in Lansweeper. A remote attacker can use a specially crafted Windows service to execute arbitrary code on an administrator's workstation...

CVE-2015-9264

Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation via a crafted Windows service...

Code injection

Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation via a crafted Windows service...

CVE-2015-9264

Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation via a crafted Windows service...

CVE-2015-9264

Lansweeper 4.x–6.x prior to 6.0.0.48 contains a vulnerability that allows an attacker to execute arbitrary code on an administrator’s workstation by supplying a crafted Windows service. Affected product: Lansweeper (Windows, admin workstation context). Root cause: improper handling of Windows ser...

store.lansweeper.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-494128 Description| Value ---|--- Affected Website:| store.lansweeper.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on...

lansweeper-s.cleverbridge.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-485281 Description| Value ---|--- Affected Website:| lansweeper-s.cleverbridge.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

lansweeper-cgn.cleverbridge.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-485183 Description| Value ---|--- Affected Website:| lansweeper-cgn.cleverbridge.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosu...

Design/Logic Flaw

LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...

CVE-2017-16841

LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...

CVE-2017-16841

LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...

CVE-2017-16841

LanSweeper 6.0.100.75 is affected by CVE-2017-16841: an XSS vulnerability via the description parameter to /Calendar/CalendarActions.aspx. The issue enables injection that can be reflected in the user’s browser; CVSS v2 base score 4.3 (MEDIUM) and CVSS v3 base score 6.1 (MEDIUM) with network acce...

CVE-2017-16841

LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...

LanSweeper 6.0.100.75 - Cross-Site Scripting Vulnerability

Exploit for asp platform in category web applications LanSweeper - Cross Site Scripting and HTMLi Title: Vulnerability in LanSweeper Date: 16-11-2017 Status: Vendor contacted, patch available Author: Miguel Mendez Z Vendor Homepage: http://www.lansweeper.com Version: 6.0.100.75 CVE: CVE-2017-1684...

LanSweeper 6.0.100.75 - Cross-Site Scripting

LanSweeper 6.0.100.75 - Cross-Site Scripting LanSweeper - Cross Site Scripting and HTMLi Title: Vulnerability in LanSweeper Date: 16-11-2017 Status: Vendor contacted, patch available Author: Miguel Mendez Z Vendor Homepage: http://www.lansweeper.com Version: 6.0.100.75 CVE: CVE-2017-16841...

LanSweeper 6.0.100.75 - Cross-Site Scripting

LanSweeper - Cross Site Scripting and HTMLi Title: Vulnerability in LanSweeper Date: 16-11-2017 Status: Vendor contacted, patch available Author: Miguel Mendez Z Vendor Homepage: http://www.lansweeper.com Version: 6.0.100.75 CVE: CVE-2017-16841 Vulnerability description -------------------------...

Server side request forgery (ssrf)

XML external entity XXE vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0.100.67 allows remote authenticated users to obtain sensitive information, cause a denial of service, conduct server-side request forgery SSRF attacks, conduct internal port...

CVE-2017-13706

XML external entity XXE vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0.100.67 allows remote authenticated users to obtain sensitive information, cause a denial of service, conduct server-side request forgery SSRF attacks, conduct internal port...

CVE-2017-13706

XML external entity XXE vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0.100.67 allows remote authenticated users to obtain sensitive information, cause a denial of service, conduct server-side request forgery SSRF attacks, conduct internal port...