high7.5Public exploit code
CVE-2014-2934
Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Caldera - '/costview2/printers.php?tr' SQL Injection2014-05-07 · webapps · php · Verified
- Caldera - '/costview2/jobs.php?tr' SQL Injection2014-05-07 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php or (2) costview2/printers.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Caldera | Caldera | Version 9.20 |