EUVD-2017-15808

Malware in sbrugna...

CVE-2017-6754

Cisco SNTC Software Collector Appliance 3.11 exposes a read-only, blind SQL injection vulnerability in its web-based management interface. An authenticated remote attacker can exploit insufficient input validation by submitting crafted URLs to extract information from the underlying database via ...

CVE-2017-6754: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web-based management interface of the Cisco Smart Net Total Care SNTC Software Collector Appliance 3.11 could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the confidentiality of the...

PT-2017-17293

Name of the Vulnerable Software and Affected Versions Cisco Smart Net Total Care SNTC Software Collector Appliance version 3.11 Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack. This...

Cisco Smart Net Total Care Contracts Details Page SQL Injection Vulnerability

A vulnerability in the web-based management interface of the Cisco Smart Net Total Care SNTC Contracts Details Page could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the confidentiality of the system...