Security Advisory

CVE-2018-6792

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-02-07 02:00:00

Last updated 2024-08-05 06:10:11

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are j_idt118, j_idt120, j_idt122, j_idt124, j_idt126, j_idt128, and j_idt130 under formularioGestionarSecciones:tablaSeccionesMib:*:filter. The GET parameter is nombreAgente.

← Browse all CVEs View on cve.org ↗