CVE-2018-15441

Cisco Prime License Manager (PLM) is affected by CVE-2018-15441, a SQL injection in the web framework code that could allow an unauthenticated, remote attacker to execute arbitrary SQL. The issue arises from inadequate validation of user-supplied input in SQL queries, exploitable via crafted HTTP...

CVE-2018-15441 Cisco Prime License Manager SQL Injection Vulnerability

A vulnerability in the web framework code of Cisco Prime License Manager PLM could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation of user-supplied input in SQL queries. An attacker could exploit this vulnerabilit...