Non notée
CVE-2016-5939 IBM Kenexa LMS on Cloud is vulnerable to SQL injection
Description
IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Kenexa LMS on Cloud | 14.2.0 | Pas de correctif indiqué |
| Kenexa LMS on Cloud | 14.1.0 | Pas de correctif indiqué |
| Kenexa LMS on Cloud | 14.0.0 | Pas de correctif indiqué |
| Kenexa LMS on Cloud 13.2 | 13.2 → 13.2.4 | Pas de correctif indiqué |
| Kenexa LMS on Cloud | 13.1 | Pas de correctif indiqué |
| Kenexa LMS on Cloud | 13.0 | Pas de correctif indiqué |
Autres CVE de Kenexa LMS on Cloud
Les 21 CVE de Kenexa LMS on Cloud →
CVE-2016-8935
IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting
Non notée
CVE-2016-8933
IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system
Non notée
CVE-2016-8928
IBM Kenexa LMS on Cloud is vulnerable to SQL injection
Non notée
CVE-2016-8932
IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to…
Non notée