PT-2017-17149

Name of the Vulnerable Software and Affected Versions Infor-Lawson formerly ESBUS versions affected versions not specified Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via the TABLE parameter to th...

CVE-2017-6550: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson formerly ESBUS allow remote attackers to execute arbitrary SQL commands via the 1 TABLE parameter to esbus/servlet/GetSQLData or 2 QUERY parameter to KKLS9ReportingPortal/GetData...