CVE-2014-3932

Publication date

2014-06-02 14:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 4.3.0.4 and 4.4.0.2 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.