ETouch Systems SamePage Enterprise Edition SQL Injection Vulnerability

ETouch Systems SamePage Enterprise Edition is an enterprise version of the Wiki WiKi solution for wikis and blogs from ETouch Systems, USA. The solution supports team collaboration, role management and document management. An SQL injection vulnerability exists in ETouch Systems SamePage Enterpris...

PT-2015-5583

Name of the Vulnerable Software and Affected Versions eTouch SamePage Enterprise Edition version 4.4.0.0.239 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the catId parameter to the "cm/blogrss/feed" API endpoint. Recommendations For version...

CVE-2015-2070: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitrary SQL commands via the catId parameter to cm/blogrss/feed...