⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-9220

HIGH · 7.5 CVSS Gepubliceerd: 03-12-2014 CWE-89

Beschrijving

SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command.

Vendors

Fedoraproject Openvas Opensuse

Affected products

Fedora Openvas Manager Opensuse

References

lists.fedoraproject.org
lists.opensuse.org
openwall.com
www.openvas.org
www.alienvault.com