CVE-2022-22149

A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

• CWE-89
• CWE-89

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1441Exploit, Third Party Advisory
• https://www.lansweeper.com/changelog/Release Notes, Vendor Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1441Exploit, Third Party Advisory
• https://www.lansweeper.com/changelog/Release Notes, Vendor Advisory

Published

Apr 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22143The package convict before 6.2.2 are vulnerable to Prototype…9.8
• CVE-2022-22144A hard-coded password vulnerability exists in the libcommonp…9.8
• CVE-2022-22145CAMS for HIS Log Server contained in the following Yokogawa …8.1
• CVE-2022-22146Cross-site scripting vulnerability in TransmitMail 2.5.0 to …6.1
• CVE-2022-22147Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2022-22148'Root Service' service implemented in the following Yokogawa…7.8
• CVE-2022-2215The GiveWP WordPress plugin before 2.21.3 does not properly …4.8
• CVE-2022-22150A memory corruption vulnerability exists in the JavaScript e…8.8
• CVE-2022-22151CAMS for HIS Log Server contained in the following Yokogawa …8.1
• CVE-2022-22152A Protection Mechanism Failure vulnerability in the REST API…6.5
• CVE-2022-22153An Insufficient Algorithmic Complexity combined with an Allo…7.5
• CVE-2022-22154In a Junos Fusion scenario an External Control of Critical S…6.8