PT-2011-3267

Name of the Vulnerable Software and Affected Versions CA Total Defense versions prior to r12 SE2 Description The issue involves multiple SQL injection vulnerabilities in the Unified Network Control UNC Server. These vulnerabilities allow remote attackers to execute arbitrary SQL commands via...

CA Total Defense Suite UnassignFunctionalUsers Stored Procedure SQL Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CA Total Defense Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UnAssignFunctionalRoles stored procedure, accessed via the management.asmx...