CVE-2012-5760: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2013-1838

Name of the Vulnerable Software and Affected Versions IBM Netezza WebAdmin application versions 6.0.5, 6.0.8, and 7.0 before P2 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML. This can be...

PT-2013-1837

Name of the Vulnerable Software and Affected Versions IBM Netezza WebAdmin application versions 6.0.5, 6.0.8, and 7.0 before P2 Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, which can lead to unauthorized access and data...

PT-2013-1840

Name of the Vulnerable Software and Affected Versions IBM Netezza WebAdmin application versions 6.0.5, 6.0.8, and 7.0 before P2 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For...

PT-2013-1839

Name of the Vulnerable Software and Affected Versions IBM Netezza WebAdmin application versions 6.0.5, 6.0.8, and 7.0 before P2 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote authenticated users to inject arbitrary web script or HTML via vectors...