PT-2011-4578

Name of the Vulnerable Software and Affected Versions Sonexis ConferenceManager version 9.3.14.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via two different parameters: the g parameter to the "Conference/Audio/AudioResourceContainer.asp"...

CVE-2011-3688: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Sonexis ConferenceManager 9.3.14.0 allow remote attackers to execute arbitrary SQL commands via 1 the g parameter to Conference/Audio/AudioResourceContainer.asp or 2 the txtConferenceID parameter to Login/HostLogin.asp...