4 matches found
CVE-2022-22149
A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...
Sql injection
A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2022-22149
Lansweeper 9.1.20.2 contains an SQL injection in the HelpdeskSetupActions.EditSetting path (HelpdeskSetupActions.cs) where the field value is concatenated into a SQL query without proper sanitization. Exploitation requires authentication with rights to change settings (Configuration -> HelpDes...
CVE-2022-22149: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...