NuytsTech Security

CVE-2014-1645

by ·

SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Date published : 2014-03-28

http://www.securityfocus.com/bid/66400

http://archives.neohapsis.com/archives/bugtraq/2014-03/0172.html

Tags: