Description
SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details. Attackers can access the vulnerable /Management/Chat/frmChatSearch.aspx endpoint to retrieve agents' first and last names along with their unique identifiers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Smartertools | SmarterTools SmarterTrack | 10.0, 14.0 | — |
References
- ExploitDB-50328 exploit
- SmarterTools Official Homepage product
- SmarterTrack Product Page product
- VulnCheck Advisory: SmarterTools SmarterTrack 7922 -Information Disclosure third-party-advisory