⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2015-7299

HIGH · 7.5 CVSS Gepubliceerd: 21-10-2015 CWE-89

Beschrijving

SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl, smartforms, and K2 for SharePoint 4.6.7 allows remote attackers to execute arbitrary SQL commands via the xml parameter.

Vendors

Nintex

Affected products

K2 Blackpearl K2 For Sharepoint K2 Smartforms

References

packetstormsecurity.com
www.securityfocus.com