Published: 08/05/2014 Updated: 01/07/2014

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote malicious users to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php or (2) costview2/printers.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
caldera caldera 9.20

source: wwwsecurityfocuscom/bid/67256/info Caldera is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in t ...

source: wwwsecurityfocuscom/bid/67256/info Caldera is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the ...

CWE-89 http://www.kb.cert.org/vuls/id/693092 https://nvd.nist.gov https://www.exploit-db.com/exploits/39174/

CVE-2014-2934

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect