Description
SQL injection vulnerability in the Business Rules Framework (CRM-BF-BRF) in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534.
References
- http://www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition/
- 74624 vdb-entry
- 1032309 vdb-entry