CVE-2011-1343 Information

Description

SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via \dynamic SQL parameters.\

Reference

http://secunia.com/advisories/43577 http://www.ibm.com/support/docview.wss?uid=swg1IZ83269 http://www.ibm.com/support/docview.wss?uid=swg24029093 http://www.vupen.com/english/advisories/2011/0550 https://exchange.xforce.ibmcloud.com/vulnerabilities/65767