Description
Multiple SQL injection vulnerabilities in Virtual Access Monitor 3.10.17 and earlier allow attackers to execute arbitrary SQL commands via unspecified vectors.
References
- http://www.nccgroup.com/media/244196/patch_notificatio_virtual_access_monitor_multiple_sql_injection_vulnerabilities.pdf
- 20130402 NGS00248 Patch Notification: Virtual Access Monitor Multiple SQL Injection Vulnerabilities mailing-list
- 58816 vdb-entry
- http://packetstormsecurity.com/files/121051/Virtual-Access-Monitor-SQL-Injection.html
- 91887 vdb-entry
- virtualaccess-unspecified-sql-injection(83179) vdb-entry
- 52801 third-party-advisory