CVE-2011-3688

CVE-2011-3688 concerns multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 . The flaws allow remote attackers to execute arbitrary SQL commands via user-controlled input in two places: (1) the g parameter to Conference/Audio/AudioResourceContainer.asp and (2) the txtConfe...