Security Advisory
CVE-2014-2934
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php or (2) costview2/printers.php.