CVE-2012-0337

CVE-2012-0337 affects Cisco Unified MeetingPlace Web Conferencing (7.1) where the web component is vulnerable to a SQL injection via crafted input. The root cause is insufficient validation of user-supplied input to the web interface (notably an HTTP POST path per Cisco advisory), enabling an att...

CVE-2012-0337: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939...