critical9.8
CVE-2021-26837
SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary…
Impact
SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortra | Delivernow | before 1.2.18 |
Weakness classification
References
- NVD record
- CVE.org record
- https://community.helpsystems.com/knowledge-base/rjs/delivernow/overview/
- https://susos.co/blog/f/cve-disclosure-sedric-louissaints-discovery-of-sql-injection-in
- https://community.helpsystems.com/knowledge-base/rjs/delivernow/overview/
- https://susos.co/blog/f/cve-disclosure-sedric-louissaints-discovery-of-sql-injection-in