CVE-2012-2956

CVE-2012-2956 affects SpiceWorks 5.3.75941 with a SQL injection in api_v2.json via the id parameter, allowing remote authenticated users to execute arbitrary SQL commands. Root cause: improper input handling enabling SQL control. Impact: potential data disclosure/modification and impact on integr...

CVE-2012-6658

Multiple cross-site scripting XSS vulnerabilities in SpiceWorks 5.3.75941 allow remote attackers to inject arbitrary web script or HTML via the 1 syslocation, 2 syscontact, or 3 sysName configuration in snmpd.conf. NOTE: this entry was SPLIT from CVE-2012-2956 per ADT2 due to different...