3 matches found
CVE-2017-2241: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execute arbitrary SQL commands via "File Transfer Web Service"...
PT-2017-15288
Name of the Vulnerable Software and Affected Versions AssetView for MacOS versions 9.2.0 and earlier Description A directory traversal issue in the "File Transfer Web Service" of AssetView for MacOS allows remote attackers to read arbitrary files. Recommendations For versions 9.2.0 and earlier,...
PT-2017-15289
Name of the Vulnerable Software and Affected Versions AssetView for MacOS versions 9.2.0 and earlier Description A SQL injection issue in the "File Transfer Web Service" allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 9.2.0 and earlier, update to a version...