Vendor
vsDesk
5 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
High 8.6
vsDesk Task Scheduler OS Command Injection
An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering. An attacker can exploit this flaw to disrupt web server operati…
-
High 8.8
Use of user input in raw SQL queries in vsDesk leading to blind SQL injection
The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposing database contents or causing the application to become unresponsive. Apply patch from vendor htt…