PT-2013-5865

Name of the Vulnerable Software and Affected Versions Thomson Reuters Velocity Analytics Vhayu Analytic Server version 6.94 build 2995 Description The issue allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action. This is related to the...

CVE-2013-5912: Improper Control of Generation of Code

VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action...