CVE-2014-2949 Information

Description

SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Reference

http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15310.html?sr=38021626 http://www.kb.cert.org/vuls/id/210884 http://www.securityfocus.com/bid/68078 http://www.zerodayinitiative.com/advisories/ZDI-14-293/