Enhancement: cves/2019/CVE-2019-13462.yaml by mp

cves/2019/CVE-2019-13462.yaml

@@ -1,11 +1,12 @@
 id: CVE-2019-13462
 
 info:
-  name: Lansweeper through 7.1.115.4 unauthenticated SQL injection
+  name: Lansweeper Unauthenticated SQL Injection
   author: divya_mudgal
   severity: critical
   reference: https://www.nccgroup.com/ae/our-research/technical-advisory-unauthenticated-sql-injection-in-lansweeper/
-  description: Lansweeper web application through 7.1.115.4 allows unauthenticated SQL injection via the "row" and "column" GET parameters to /WidgetHandler.ashx?MethodName=Sort&ID=1&column=INJECTION&row=INJECTION URI.
+  description: Lansweeper before 7.1.117.4 allows unauthenticated SQL injection.
+  remediation: Upgrade to the latest version.
   tags: cve,cve2019,sqli,lansweeper
   classification:
     cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
@@ -34,3 +35,5 @@ requests:
       - type: status
         status:
           - 500
+
+# Enhanced by mp on 2022/02/04