Description
SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- http://support.apple.com/kb/HT6448
- APPLE-SA-2014-10-16-3 vendor-advisory
- macosx-cve20144424-sql-injection(96048) vdb-entry
- 61305 third-party-advisory
- 69918 vdb-entry
- http://support.apple.com/kb/HT6449
- https://support.apple.com/kb/HT6536
- 1030869 vdb-entry
- 61307 third-party-advisory