CVE-2022-22149

A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

Sql injection

A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2022-22149

Lansweeper 9.1.20.2 contains an SQL injection in the HelpdeskSetupActions.EditSetting path (HelpdeskSetupActions.cs) where the field value is concatenated into a SQL query without proper sanitization. Exploitation requires authentication with rights to change settings (Configuration -> HelpDes...