CVE-2014-2949

CVE-2014-2949 is a SQL injection vulnerability in F5 ARX Data Manager 3.0.0–3.1.0 web service. The issue allows an authenticated user to inject SQL and, per sources, may enable remote code execution on vulnerable installations. Affected product is ARX Data Manager (3.x) with web service exposed; ...