Security Advisory

CVE-2014-9435

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-01-02 19:00:00

Last updated 2024-09-16 17:58:30

Assigner mitre

State PUBLISHED

Description

Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL commands via the (1) sectionID parameter to admin/managersection.php, (2) userID parameter to admin/edituser.php, (3) username parameter to admin/admin.php, or (4) title parameter to admin/managerrelated.php.

← Browse all CVEs View on cve.org ↗