CVE-2012-0337

CVE-2012-0337 affects Cisco Unified MeetingPlace Web Conferencing (7.1) where the web component is vulnerable to a SQL injection via crafted input. The root cause is insufficient validation of user-supplied input to the web interface (notably an HTTP POST path per Cisco advisory), enabling an att...