CVE-2016-5817

SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2016-5817

Navis WebAccess (Navis, a Navis/Navis, Inc. product) is affected by CVE-2016-5817, a SQL injection vulnerability in news pages that allowed remote attackers to execute arbitrary SQL via unspecified vectors. The vulnerability targets WebAccess versions prior to the August 10, 2016 patch release; N...

CVE-2016-5817: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news pages in Cargotec Navis WebAccess before 2016-08-10 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2016-6695

Name of the Vulnerable Software and Affected Versions Cargotec Navis WebAccess versions prior to 2016-08-10 Description A SQL injection issue exists in the news pages of the software, allowing remote attackers to execute arbitrary SQL commands. The exact vectors used for the attack are not...