high8.8
CVE-2015-3423
Multiple SQL injection vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to execute arbitrary SQL commands v…
Impact
Multiple SQL injection vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) ctrl, (2) h____%2427, (3) h____%2439, (4) param0, (5) param1, (6) param2, (7) param3, (8) param4, (9) filter_INSERT_COUNT, (10) filter_MINOR_FALLOUT, (11) filter_UPDATE_COUNT, (12) sort, or (13) sessid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netcracker | Resource Management System | before 8.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/132808/NetCracker-Resource-Management-System-8.0-SQL-Injection.html
- http://www.securityfocus.com/archive/1/archive/1/536054/100/0/threaded
- http://packetstormsecurity.com/files/132808/NetCracker-Resource-Management-System-8.0-SQL-Injection.html
- http://www.securityfocus.com/archive/1/archive/1/536054/100/0/threaded