3 matches found
Sql injection
Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...
CVE-2011-3688
Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...
PT-2011-4578
Name of the Vulnerable Software and Affected Versions Sonexis ConferenceManager version 9.3.14.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via two different parameters: the g parameter to the "Conference/Audio/AudioResourceContainer.asp"...