CVE-2013-4945

Multiple SQL injection vulnerabilities in BMC Service Desk Express SDE 10.2.1.95 allow remote attackers to execute arbitrary SQL commands via the 1 ASPSESSIONIDASSRATTQ, 2 TABLEWIDGET1, 3 TABLEWIDGET2, 4 browserDateTimeInfo, or 5 browserNumberInfo cookie parameter to DashBoardGUI.aspx; or the 6 U...

PT-2013-5293

Name of the Vulnerable Software and Affected Versions BMC Service Desk Express SDE version 10.2.1.95 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several cookie parameters to the "DashBoardGUI.aspx" endpoint, including...