HP Data Protector Multiple Products GetPolicies SQL Injection (CVE-2011-3157)

An SQL injection vulnerability has been reported in multiple HP Data Protector products...

CVE-2011-3157

HP Data Protector Notebook Extension contains a vulnerability in the dpnepolicyservice GetPolicies method that does not properly validate the clientVersion field, enabling remote attackers to execute arbitrary SQL queries as the service user. Affected products include HP Data Protector Notebook E...