medium6.5
CVE-2014-7871
SQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6.0-rev23 allows remote authenticated users to execute arbitrar…
Impact
SQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6.0-rev23 allows remote authenticated users to execute arbitrary SQL commands via a crafted jslob API call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open-Xchange | Open-Xchange Appsuite | through 7.4.2 Version 7.6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/129020/OX-App-Suite-7.6.0-SQL-Injection.html
- http://www.securityfocus.com/archive/1/533936/100/0/threaded
- http://www.securityfocus.com/bid/70982
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98563
- http://packetstormsecurity.com/files/129020/OX-App-Suite-7.6.0-SQL-Injection.html
- http://www.securityfocus.com/archive/1/533936/100/0/threaded
- http://www.securityfocus.com/bid/70982
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98563