Vulnerability Details CVE-2021-26837
SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 53.5%
CVSS Severity
CVSS v3 Score 9.8
References
- https://community.helpsystems.com/knowledge-base/rjs/delivernow/overview/
- https://susos.co/blog/f/cve-disclosure-sedric-louissaints-discovery-of-sql-injection-in
- https://community.helpsystems.com/knowledge-base/rjs/delivernow/overview/
- https://susos.co/blog/f/cve-disclosure-sedric-louissaints-discovery-of-sql-injection-in
Products affected by CVE-2021-26837
-
cpe:2.3:a:fortra:delivernow:*