Sql injection

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the 1 hardwareType, 2 hardwareStatus, or 3 hardwareLocation parameter in a search command...

PT-2013-5338

Name of the Vulnerable Software and Affected Versions Kwok Information Server versions prior to 2.8.5 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the hardwareType, hardwareStatus, or hardwareLocation parameter in a search...