Lansweeper vulnerabilities
We track 5 vulnerabilities in Lansweeper products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on December 15, 2022.
Latest Lansweeper vulnerabilities
- 8.8 High severity
lansweeper: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability.
- 8.8 High severity
lansweeper: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulner
- 8.8 High severity
lansweeper: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
- 8.8 High severity
lansweeper: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
- 8.8 High severity
lansweeper: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.