CVE-2021-26837

CVE-2021-26837 Injeção de SQL no HelpSystems / Fortra DeliverNow O parâmetro SearchTextbox na página de pesquisa de logs do DeliverNow /LogGrid.aspx é concatenado diretamente em uma consulta do SQL Server, sem parametrização e sem validação no servidor. O aplicativo também exibia os erros de...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

Sql injection

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

Fortra DeliverNow SQL Injection Vulnerability

Fortra DeliverNow is a Fortra application. A security vulnerability exists in Fortra DeliverNow versions prior to 1.2.18, which stems from a SQL injection vulnerability in the parameter SearchTextBox. The vulnerability can be exploited by an attacker to execute arbitrary code, elevate privileges,...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...