PT-2014-2259

Name of the Vulnerable Software and Affected Versions SpiceWorks version 5.3.75941 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the id parameter to the "api v2.json" API endpoint. Recommendations For SpiceWorks version 5.3.75941,...