7.5
CVSSv2

CVE-2014-1645

Published: 29/03/2014 Updated: 31/03/2014
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x prior to 2.3.2.110 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

symantec liveupdate administrator 2.2.1

symantec liveupdate administrator 2.2.2.9

symantec liveupdate administrator 2.3.1

symantec liveupdate administrator

symantec liveupdate administrator 2.1.0

symantec liveupdate administrator 2.1.2

symantec liveupdate administrator 2.1.3

symantec liveupdate administrator 2.2.2

symantec liveupdate administrator 2.3.0