CVE-2012-4949

SQL injection vulnerability in ESRI ArcGIS 10.1 allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service...

PT-2012-5683 · Esri · Esri Arcgis

Name of the Vulnerable Software and Affected Versions: ESRI ArcGIS version 10.1 Description: The issue allows remote authenticated users to execute arbitrary SQL commands via the where parameter to a query URI for a REST service. This can be achieved by accessing specific API endpoints, such as a...