CVE-2014-3446

Publication date

2014-10-30 14:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter.