CVE-2010-4284: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the authentication form in the integrated web server in the Data Management Server DMS before 1.4.3 in Samsung Integrated Management System allows remote attackers to execute arbitrary SQL commands via unspecified vectors...