Vulnerability Details CVE-2021-26837
SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.7%
CVSS Severity
CVSS v3 Score 9.8
References
- https://community.helpsystems.com/knowledge-base/rjs/delivernow/overview/
- https://susos.co/blog/f/cve-disclosure-sedric-louissaints-discovery-of-sql-injection-in
- https://community.helpsystems.com/knowledge-base/rjs/delivernow/overview/
- https://susos.co/blog/f/cve-disclosure-sedric-louissaints-discovery-of-sql-injection-in
Products affected by CVE-2021-26837
-
cpe:2.3:a:fortra:delivernow:*