CVE-2011-5031

CVE-2011-5031 describes multiple SQL injection vulnerabilities in the servlet/capexweb.parentvalidatepassword routine of cApexWEB 1.1 . The defects allow remote attackers to inject arbitrary SQL through the parameters dfuserid and dfpassword , potentially compromising data confidentiality and int...