Sql injection

SQL injection vulnerability in ArrayOS before AG 9.4.0.135, when the portal bookmark function is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-6557

CVE-2017-6557 concerns ArrayOS prior to AG 9.4.0.135 where the portal bookmark function, when enabled, yields a SQL injection vulnerability. The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. The affected product is ArrayOS; the described root c...