Sql injection

An issue was discovered in Skybox Platform before 7.5.201. SQL Injection exists in /skyboxview/webservice/services/VersionWebService via a soapenv:Body element...

Cross site scripting

An issue was discovered in Skybox Platform before 7.5.401. Reflected cross-site scripting vulnerabilities exist in /skyboxview/webservice/services/VersionRepositoryWebService via a soapenv:Body element, or in the status parameter to login.html...

CVE-2015-9249: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Skybox Platform before 7.5.201. SQL Injection exists in /skyboxview/webservice/services/VersionWebService via a soapenv:Body element...

CVE-2015-9247: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Skybox Platform before 7.5.401. Reflected cross-site scripting vulnerabilities exist in /skyboxview/webservice/services/VersionRepositoryWebService via a soapenv:Body element, or in the status parameter to login.html...

PT-2018-4561

Name of the Vulnerable Software and Affected Versions Skybox Platform versions prior to 7.5.201 Description An issue exists in the software, where SQL Injection is possible. This occurs via a soapenv:Body element in the /skyboxview/webservice/services/VersionWebService API endpoint. Recommendatio...