3 matches found
SUSE CVE-2014-9220
SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modifyschedule OMP command...
7.5CVSS8.8AI score0.02065EPSS
SaveExploits0References3
Sql injection
SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modifyschedule OMP command...
7.5CVSS8.9AI score0.02065EPSS
SaveExploits0References5Affected Software3
CVE-2014-9220: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modifyschedule OMP command...
7.5CVSS6.4AI score0.02065EPSS
SaveExploits0References2
20