SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote malicious users to execute arbitrary SQL commands via the username parameter in a GenerateMainFrame command.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ibm rational clearquest 7.0.0.0 |
||
ibm rational clearquest 7.0.0.1 |