Description
Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and (2) AVR WebGUI in WebAccelerator and WOM 11.2.x before 11.2.0-HF3 and 11.2.x before 11.2.1-HF3 allow remote authenticated users to execute arbitrary SQL commands via the defaultQuery parameter.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/51867 ↗
- http://osvdb.org/89446 ↗
- http://www.securityfocus.com/bid/57500 ↗
- http://packetstormsecurity.com/files/119739/F5-BIG-IP-11.2.0-SQL-Injection.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81457 ↗
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130122-1_F5_BIG-IP_SQL_Injection_v10.txt ↗
- http://archives.neohapsis.com/archives/bugtraq/2013-01/0094.html ↗
- http://support.f5.com/kb/en-us/solutions/public/14000/100/sol14154.html ↗