U.S. Dept Of Defense: SQLi in LASCO CME Query

A SQL injection vulnerability was discovered in the "CME DateTime" parameter on the LASCO CME Query form. The vulnerability allows an attacker to execute arbitrary SQL commands on the server...