Summary
swDesk is prone to the following vulnerabilities:
1. An arbitrary file-upload vulnerability.
2. Multiple cross-site scripting vulnerabilities.
3. Multiple PHP code-injection vulnerabilities.
An attacker can exploit these issues to execute arbitrary script code in the context of the affected site, steal cookie-based authentication credentials, upload arbitrary code, or inject and execute arbitrary code in the context of the affected application. This may facilitate a compromise of the application and the underlying system other attacks
are also possible.
References
Updated on 2015-03-25
