critical9.8
CVE-2015-0782
SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to exec…
Impact
SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Zenworks Configuration Management | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/72808
- http://www.zerodayinitiative.com/advisories/ZDI-15-148
- https://www.novell.com/support/kb/doc.php?id=7016431
- http://www.securityfocus.com/bid/72808
- http://www.zerodayinitiative.com/advisories/ZDI-15-148
- https://www.novell.com/support/kb/doc.php?id=7016431