CVE-2014-6030: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow 1 remote attackers to execute arbitrary SQL commands via the SurveyID parameter to survey/ReviewReadOnlySurvey.aspx or 2 remote authenticated users to execute arbitrary SQL commands via the SurveyID...

PT-2014-7013

Name of the Vulnerable Software and Affected Versions ClassApps SelectSurvey.NET versions prior to 4.125.002 Description The issue allows remote attackers to execute arbitrary SQL commands via the SurveyID parameter to "/survey/ReviewReadOnlySurvey.aspx" or remote authenticated users to execute...