CVE-2014-7176

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...

Sql injection

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...

CVE-2014-7176

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...

CVE-2014-7176: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobaltxt parameter to plugins/docman...

PT-2014-7815

Name of the Vulnerable Software and Affected Versions Enalean Tuleap versions prior to 7.5.99.4 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the lobal txt parameter to plugins/docman API endpoint. Recommendations For versions prio...