5 matches found
CVE-2018-12295
SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter...
Sql injection
SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter...
CVE-2018-12295
SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter...
CVE-2018-12295: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter...
PT-2019-8882
Name of the Vulnerable Software and Affected Versions Seagate NAS OS version 4.3.15.1 Description The issue allows attackers to execute arbitrary SQL commands. This is achieved via the dirId URL parameter in the folderViewSpecific.psp file. Recommendations For Seagate NAS OS version 4.3.15.1, avo...