SQL Injection

salesforce.sdk.core is vulnerable to SQL injection. The vulnerability exists in QuerySpec.cs because the user provided inputs for are not properly validated which allows an attacker to inject and execute malicious SQL queries in the system...

CVE-2016-15012

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in forcedotcom SalesforceMobileSDK-Windows up to 4.x. It has been rated as critical. This issue affects the function ComputeCountSql of the file SalesforceSDK/SmartStore/Store/QuerySpec.cs. The manipulation leads to sql injection. Upgrading to...

CVE-2016-15012

CVE-2016-15012 affects SalesforceMobileSDK-Windows up to version 4.x. The vulnerability lies in the function ComputeCountSql within SalesforceSDK/SmartStore/Store/QuerySpec.cs, allowing SQL injection. Upgrading to version 5.0.0 addresses the issue (patch 83b3e91e0c1e84873a6d3ca3c5887eb5b4f5a3d8)....