EUVD-2015-4010

Malware in sbrugna...

SAP CRM Business Rules Framework SQL Injection Vulnerability

SAP CRM is a customer relationship management solution. A SQL injection vulnerability exists in SAP CRM's Business Rules Framework CRM-BF-BRF, which allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

SAP CRM Business Rules Framework Arbitrary Code Execution Vulnerability

SAP CRM is a customer relationship management solution. SAP CRM's Business Rules Framework CRM-BF-BRF fails to properly filter user-submitted input, allowing remote attackers to exploit the vulnerability by submitting specially crafted requests to execute arbitrary code...

CVE-2015-3980

SQL injection vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534...

CVE-2015-3979

Unspecified vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Security Note 2097534...

Sql injection

SQL injection vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534...

Security feature bypass

Unspecified vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Security Note 2097534...

CVE-2015-3979

Unspecified vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Security Note 2097534...

CVE-2015-3980

SQL injection vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534...

PT-2015-6367

Name of the Vulnerable Software and Affected Versions SAP CRM affected versions not specified Description The issue is related to an unspecified vulnerability in the Business Rules Framework CRM-BF-BRF of SAP CRM, which allows attackers to execute arbitrary code. The exact vectors used for the...

PT-2015-6368

Name of the Vulnerable Software and Affected Versions SAP CRM affected versions not specified Description A SQL injection issue in the Business Rules Framework CRM-BF-BRF of SAP CRM allows attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a...

CVE-2015-3980: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534...

CVE-2015-3979: Undefined Security Weakness

Unspecified vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Security Note 2097534...