CVE-2017-12227

CVE-2017-12227 corresponds to a blind SQL injection in the Cisco Emergency Responder SQL database interface. The vulnerability arises from failure to validate user-supplied input used in SQL queries, allowing an authenticated, remote attacker to craft URLs containing SQL statements and potentiall...