CVE-2016-1393

Cisco CNAP (Cloud Network Automation Provisioner) 1.0–1.1 contains a SQL injection vulnerability exploitable by an authenticated, remote attacker via crafted URLs. The underlying issue is failure to validate user-supplied input in SQL queries, enabling manipulation or disclosure of database data....