CVE-2011-0960

Currently unrated

Key Information:

Vendor
Cisco
Status
Unified Operations Manager
Vendor
CVE Published:
20 May 2011

Summary

Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to execute arbitrary SQL commands via (1) the CCMs parameter to iptm/PRTestCreation.do or (2) the ccm parameter to iptm/TelePresenceReportAction.do, aka Bug ID CSCtn61716.

References

http://www.securityfocus.com/bid/47898
vdb-entryx_refsource_BID
http://tools.cisco.com/security/center/viewAlert.x?alertI...
x_refsource_CONFIRM
http://www.senseofsecurity.com.au/advisories/SOS-11-006.pdf
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.