CVE-2011-1915

SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
Link Resource
http://www.kb.cert.org/vuls/id/402731 US Government Resource
http://secunia.com/advisories/46638 Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:infor:enspire_distribution_management_solution:7.3.2.7:*:*:*:*:*:*:*
cpe:2.3:a:infor:eclient:7.3.2.3:*:*:*:*:*:*:*

Information

Published : 2011-11-01 12:55

Updated : 2012-02-28 21:00


NVD link : CVE-2011-1915

Mitre link : CVE-2011-1915


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

infor

  • eclient
  • enspire_distribution_management_solution