← Back to CVE List

CVE-2017-6550

Published: 2017-03-20T16:59Z
Last Modified: 2024-11-21T03:30Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via the (1) TABLE parameter to esbus/servlet/GetSQLData or (2) QUERY parameter to KK_LS9ReportingPortal/GetData. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt