Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Insufficient input sanitization of two parameters in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to execute SQL injection attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CA PPM SQL注入漏洞
Vulnerability Description
CA PPM是美国CA公司的一套项目和项目组合管理软件。该软件包括任务管理、项目规划、财务报告管理和资源管理等功能。 CA PPM中存在SQL注入漏洞,该漏洞源于程序对参数的输入验证不充分。远程攻击者可利用该漏洞执行任意的SQL命令。以下版本受到影响:CA PPM 14.3及之前版本, 14.4版本,15.1版本,15.2 CP5及之前版本,15.3 CP2及之前版本。
CVSS Information
N/A
Vulnerability Type
N/A