CVE-2014-9220 in OpenVAS Manager
Resumen (Inglés)
SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command.
Reservar
2014-12-02
Divulgación
2014-12-02
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 68303 | OpenVAS Manager OMP modify_schedule inyección SQL | 89 | Alto | Arreglo oficial | CVE-2014-9220 |