Lansweeper CVE-2022-21234 SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-21234
• https://www.nsfocus.net/vulndb/64510
• https://cve.imfht.com/detail/CVE-2022-21234
• https://www.manageengine.com/vulnerability-management/vulnerability-database/vmp-379597.html
• https://cve.imfht.com/product/lansweeper
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1443
• https://vuldb.com/pt/vuln/197429
• https://www.manageengine.com/vulnerability-management/vulnerability-database/Lansweeper-(x64)-vulnerabilities.html

Related Vulnerabilities

• PoCCVE-2019-13462: Lansweeper Unauthenticated SQL Injection
• PoCCVE-2021-21234: Spring Boot Actuator Logview Directory Traversal
• PoCunauthenticated-lansweeper: Unauthenticated Lansweeper Instance
• Lansweeper lansweeper HelpdeskActions.aspx EditTemplate目录遍历漏洞
• Lansweeper lansweeper AssetActions.aspx目录遍历漏洞
• Lansweeper CVE-2022-21210 SQL注入漏洞
• Lansweeper CVE-2022-21145跨站脚本漏洞
• Lansweeper lansweeper TicketTemplateActions.aspx 目录遍历漏洞
• Lansweeper CVE-2022-22149 SQL注入漏洞
• Spring Boot 目录遍历(CVE-2021-21234)