CVE-2013-5912

VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action...

CVE-2013-5912

The VhttpdMgr component in Thomson Reuters Velocity Analytics Vhayu Analytic Server version 6.94 build 2995 (and possibly earlier) is vulnerable to a Code Injection (CWE-94) vulnerability. A remote, unauthenticated attacker can craft a malicious URL using the importFile action and the fileName pa...

Thomson Reuters Velocity Analytics Vhayu Analytic Server version 6.9.4 build 2995 contains a code injection vulnerability

Overview Thomson Reuters Velocity Analytics Vhayu Analytic Server version 6.94 build 2995 and possibly earlier versions contain a code injection vulnerability CWE-94. Description CWE-94:Improper Control of Generation of Code 'Code Injection' Thomson Reuters Velocity Analytics Vhayu Analytic Serve...