CVE-2015-0782

SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management ZCM allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-0782

The CVE-2015-0782 entry concerns Novell ZENworks Configuration Management (ZCM). The ScheduleQuery method in the Schedule class is vulnerable to SQL injection via unsanitized input, allowing remote attackers to execute arbitrary SQL commands. Multiple connected sources describe the vulnerability ...