Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Pentaho BI Project Multiple Unspecified SQL Injection Vulnerabilities

Pentaho BI Project is prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.







 

Privacy Statement
Copyright 2009, SecurityFocus