CVE-2021-26837

CVE-2021-26837 SQL Injection in HelpSystems / Fortra DeliverNow The SearchTextbox parameter on DeliverNow's log search page /LogGrid.aspx is concatenated directly into a SQL Server query with no parameterisation and no server-side validation. The application also rendered the resulting SQL Server...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

Sql injection

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

Fortra DeliverNow SQL Injection Vulnerability

Fortra DeliverNow is a Fortra application. A security vulnerability exists in Fortra DeliverNow versions prior to 1.2.18, which stems from a SQL injection vulnerability in the parameter SearchTextBox. The vulnerability can be exploited by an attacker to execute arbitrary code, elevate privileges,...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...