CVE-2021-35487

Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates for the Manage Alerts page via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user,...

PT-2022-10463

Name of the Vulnerable Software and Affected Versions Nokia Broadcast Message Center versions prior to 11.1.0 Description The issue allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint "/owui/block/send-receive-updates" for the Manage Alerts page via the...

Nokia Broadcast Message Center SQL Injection Vulnerability

Nokia Broadcast Message Center is a broadcast message center for Nokia Finland to manage alerts. An SQL injection vulnerability exists in Nokia Broadcast Message Center 11.1.0 and earlier versions, which originates in /owui/block/send-receive-updates extIdentifier HTTP POST parameter is missing...

CVE-2021-35487: Improper Neutralization of Special Elements used in an SQL Command

Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates for the Manage Alerts page via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user,...