CVE-2014-2503

Summary (CVE-2014-2503) : EMC Documentum Digital Asset Manager (DAM) 6.5 SP3/SP4/SP5/SP6 before P13 is affected by a Blind DQL injection via the thumbnail proxy server, allowing remote attackers to bypass query restrictions. The issue arises from how a crafted URL query parameter is processed, en...