CVE-2019-13462

概要

参考情報

• lansweeper.com/forum/yaf_topics33_Announcements.aspx · Vendor Advisory
• nccgroup.trust/uk/our-research/technical-advisory-unauthenticated-sql-injection-in-lansweeper · Exploit

lansweeper のその他の脆弱性

• CVE-2022-32763中 6.1A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lansweeper lansweeper 10.1.1.0. A…
• CVE-2022-32573高 8.8A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A specially-craf…
• CVE-2022-29517高 8.8A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10.1.1.0. A speci…
• CVE-2022-29511中 6.5A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweeper lansweeper 10.1.1…
• CVE-2022-28703中 5.4A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansweeper lansweeper 10.…