PT-2016-6615 · Misys · Misys Fusioncapital Opics Plus

Wissam Bashour · Publicado 2016-07-19 · Atualizado 2016-11-28 · CVE-2016-5653

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Misys FusionCapital Opics Plus (affected versions not specified)

Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the ID or Branch parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2016-5653

Produtos afetados

Misys Fusioncapital Opics Plus

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-5653 · Nota de Segurança
• http://kb.cert.org/vuls/id/682704 · Nota
• http://securityfocus.com/bid/92035 · Nota