CVE-2014-2934

Publication date

2014-05-08 10:00:00

Family

certcc

State

PUBLISHED

Description

Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php or (2) costview2/printers.php.