Dsk vulnerabilities
We track 3 vulnerabilities in Dsk products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 18, 2022.
Latest Dsk vulnerabilities
- 7.1 High severity
Dsknet: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A SQL Injection vulnerability allows authenticated users to taint database data and extract sensitive information via crafted HTTP requests. The type of SQL Injection is blind boolean based.
- 8.2 High severity
Dsknet: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A PresAbs.php SQL Injection vulnerability allows unauthenticated users to taint database data and extract sensitive information via crafted HTTP requests. The type of SQL Injection is blind boole
- 8.8 High severity
Dsknet: Unrestricted Upload of File with Dangerous Type
An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. The Touch settings allow unrestricted file upload (and consequently Remote Code Execution) via PDF upload with PHP content and a .php extension. The attacker must hijack or obtain privileged user