CVE-2019-16959

Description

References

• support.solarwinds.com/SuccessCenter/s · Product
• esecforte.com/formula-injection-vulnerability-india-in-solarwinds-web-help-desk · Exploit
• solarwinds.com/free-tools/free-help-desk-software · Product

Altre vulnerabilità di webhelpdesk

• CVE-2021-35254ALTO 8.8SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input…
• CVE-2021-35232MEDIO 6.1Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web …
• CVE-2019-16957MEDIO 5.4SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account.
• CVE-2019-16955MEDIO 5.4SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request.
• CVE-2019-20002ALTO 7.8Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subjec…