CVE-2012-4951: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attackers to execute arbitrary SQL commands via the 1 TerminalId, 2 ModelName, or 3 ApplicationName parameter...

PT-2012-5685

Name of the Vulnerable Software and Affected Versions VeriFone VeriCentre Web Console versions prior to 2.2 build 36 Description The issue concerns SQL injection vulnerabilities in the terminal/paramedit.aspx file. Remote attackers can execute arbitrary SQL commands by manipulating the TerminalId...