PT-2013-4489

Name of the Vulnerable Software and Affected Versions Wave EMBASSY Remote Administration Server ERAS affected versions not specified Description A SQL injection issue in the Help Desk application of Wave EMBASSY Remote Administration Server ERAS allows remote attackers to execute arbitrary SQL...

CVE-2013-3577: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote attackers to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field...

CVE-2013-3578: Improper Neutralization of Special Elements used in an OS Command

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server ERAS allows remote authenticated users to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter aka the search field, leading to execution of operating-system...