swDesk is prone to the following vulnerabilities: 1. An arbitrary file-upload vulnerability. 2. Multiple cross-site scripting vulnerabilities. 3. Multiple PHP code-injection vulnerabilities. An attacker can exploit these issues to execute arbitrary script code in the context of the affected site, steal cookie-based authentication credentials, upload arbitrary code, or inject and execute arbitrary code in the context of the affected application. This may facilitate a compromise of the application and the underlying system other attacks are also possible.

• http://www.securityfocus.com/bid/51792
• http://www.swdesk.com/

---

Updated on 2015-03-25