CVE-2017-14960

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• EMC xPression 4.5SP1 Patch 13 - 'model.jobHistoryId' SQL Injection2018-01-03 · webapps · multiple

Impact

xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL Injection.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://seclists.org/fulldisclosure/2018/Jan/6
• http://www.securityfocus.com/bid/102419
• https://www.exploit-db.com/exploits/43422/
• http://seclists.org/fulldisclosure/2018/Jan/6
• http://www.securityfocus.com/bid/102419
• https://www.exploit-db.com/exploits/43422/