NetSight
IP …
high7.5

CVE-2011-1343

SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic …

Impact

SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via "dynamic SQL parameters."

Affected products

VendorProductAffected versions
IbmTivoli Netcool\/Omnibus
through 7.2.1.10
Versions 7.1.0.0, 7.1.0.11, 7.1.0.12, 7.1.0.13, 7.2.0.0

Weakness classification

CWE-89

References