CVE-2016-1437

CVE-2016-1437 is a SQL injection vulnerability in the SQL database of Cisco Prime Collaboration Deployment, affecting versions prior to 11.5.1. The flaw allows remote authenticated users to execute arbitrary SQL commands via a crafted URL (Bug CSCuy92549). Exploitation relies on inadequate input ...