Lansweeper CVE-2022-22149 SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-22149
• https://github.com/advisories/GHSA-mc88-h9v4-24mj
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1441
• https://app.opencve.io/cve/?vendor=lansweeper
• https://www.redpacketsecurity.com/lansweeper-sql-injection-cve-2022-22149/
• https://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2022-1472.html/
• https://vi.strobes.co/cve/CVE-2022-22149
• https://www.sms-datatech.co.jp/securitynow/vuln/cve/CVE-2022-22149/

Related Vulnerabilities

• PoCCVE-2019-13462: Lansweeper Unauthenticated SQL Injection
• PoCunauthenticated-lansweeper: Unauthenticated Lansweeper Instance
• Lansweeper lansweeper HelpdeskActions.aspx EditTemplate目录遍历漏洞
• Lansweeper CVE-2022-21234 SQL注入漏洞
• Lansweeper lansweeper AssetActions.aspx目录遍历漏洞
• Lansweeper CVE-2022-21210 SQL注入漏洞
• Lansweeper CVE-2022-21145跨站脚本漏洞
• Lansweeper lansweeper TicketTemplateActions.aspx 目录遍历漏洞