Skip to content
OpenAdvisories
Unscored CVE-2013-3577 EUVD-2013-3511GHSA-xqx7-gx4p-gc46

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote attackers to exe…

Published Jul 15, 2013 · Updated Sep 16, 2024 · Assigned by certcc

Description

SQL injection vulnerability in the Help Desk application in Wave EMBASSY Remote Administration Server (ERAS) allows remote attackers to execute arbitrary SQL commands via the ct100$4MainController$TextBoxSearchValue parameter (aka the search field).

References