5 matches found
CVE-2017-16670
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...
Code injection
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...
CVE-2017-16670
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...
PT-2018-6303
Name of the Vulnerable Software and Affected Versions: SoapUI version 5.3.0 Description: The issue allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file. Recommendations: For SoapUI version 5.3.0, consider restricting access to the project...
CVE-2017-16670: Improper Control of Generation of Code
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...