Unscored CVE-2016-1393 EUVD-2016-2492GHSA-5572-qjj3-g5hw

SQL injection vulnerability in Cisco Cloud Network Automation Provisioner (CNAP) 1.0 and 1.1 allows remote authenticated users to execute a…

Published May 12, 2016 · Updated Aug 5, 2024 · Assigned by cisco

Description

SQL injection vulnerability in Cisco Cloud Network Automation Provisioner (CNAP) 1.0 and 1.1 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuy72175.

References

20160510 Cisco Cloud Network Automation Provisioner SQL Injection Vulnerability vendor-advisory
90519 vdb-entry