Lucene search
RootSSV:62002HistoryMar 31, 2014 - 12:00 a.m.
Symantec LiveUpdate Administrator SQL注入漏洞
2014-03-3100:00:00
Root
www.seebug.org
8
0.309 Low
EPSS
Percentile
96.5%
Bugtraq ID:66400
CVE ID:CVE-2014-1645
Symantec LiveUpdate Administrator是一款Symantec产品升级管理程序。
Symantec LiveUpdate Administrator管理GUI不正确过滤用户提交的输入，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。
0
Symantec LiveUpdate Administrator 2.x
Symantec LiveUpdate Administrator 2.3.2.110已经修复该漏洞，建议用户下载更新：
http://www.symantec.com/business/support/index?page=content&id=TECH134809
Related
cve
cve
CVE-2014-1645
2014-03-29 01:55:00
prion
prion
Sql injection
2014-03-29 01:55:00
openvas
openvas
Symantec LiveUpdate Administrator Multiple Vulnerabilities
2014-04-03 00:00:00
nessus
nessus
securityvulns
securityvulns
SEC Consult SA-20140328-0 :: Multiple vulnerabilities in Symantec LiveUpdate Administrator
2014-03-31 00:00:00
Symantec LiveUpdate Administrator security vulnerabilities
2014-03-31 00:00:00
symantec
symantec