CVE-2016-5939

IBM Kenexa LMS on Cloud is affected by SQL injection (CVE-2016-5939). Multiple connected sources confirm a vulnerability where a remote attacker can send specially crafted SQL statements to view, add, modify, or delete data in the back-end database. The IBM security bulletin notes affected versio...