PT-2024-31170 · Topdesk · Topdesk

Name of the Vulnerable Software and Affected Versions: todesk version 1.1 Description: The issue allows a remote attacker to execute arbitrary code. This is achieved via the "/todesk.com/news.html" API endpoint, where a parameter is vulnerable to SQL injection. No information is provided about th...