PT-2011-5178

Name of the Vulnerable Software and Affected Versions cApexWEB version 1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the dfuserid and dfpassword parameters in the servlet/capexweb.parentvalidatepassword. Recommendations For cApexWEB...

CVE-2011-5031: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 dfuserid and 2 dfpassword parameters. NOTE: some of these details are obtained from third party information...