CVE-2021-26837

CVE-2021-26837 Iniezione SQL in HelpSystems / Fortra DeliverNow Il parametro SearchTextbox nella pagina di ricerca log di DeliverNow /LogGrid.aspx viene concatenato direttamente in una query SQL Server senza parametrizzazione e senza validazione lato server. L'applicazione mostrava inoltre gli...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...

CVE-2021-26837

SQL Injection vulnerability in SearchTextBox parameter in Fortra Formerly HelpSystems DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information...