CVE Feed

    Dashboard / CVE / CVE-2017-16841

    CVE-2017-16841

    LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx.

    Published:Nov 16, 2017
    Last Modified:Apr 20, 2025
    EPS:Nov 16, 2017
    EPSS Score:0.00296
    CVSS Score:6.1

    Affected Products

    Vendor
    Lansweeper
    Product
    Lansweeper

    Exploits

    https://www.exploit-db.com/exploits/43149/https://www.linkedin.com/pulse/lansweeper-bug-miguel-angel-mendez-oscphttps://www.exploit-db.com/exploits/43149/https://www.linkedin.com/pulse/lansweeper-bug-miguel-angel-mendez-oscphttps://www.exploit-db.com/exploits/43149

    Related CVEs

    CVE-2022-32763 (CVSS 6.1) — A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lan…
    CVE-2022-32573 (CVSS 9.9) — A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lanswee…
    CVE-2022-29517 (CVSS 9.9) — A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweepe…
    CVE-2022-29511 (CVSS 6.5) — A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality o…
    CVE-2022-28703 (CVSS 5.4) — A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionalit…
    CVE-2022-27498 (CVSS 6.5) — A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionali…
    CVE-2022-22149 (CVSS 8.8) — A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9…
    CVE-2022-21234 (CVSS 8.8) — An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2. …
    CVE-2022-21210 (CVSS 8.8) — An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2…
    CVE-2022-21145 (CVSS 4.8) — A stored cross-site scripting vulnerability exists in the WebUserActions.aspx functionality of Lansweeper lans…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High