CVE:CVE-2011-0467
CNNVD:CNNVD-201806-375
Novell SUSE Studio Onsite和SUSE Studio Onsite Appliance都是美国Novell公司的用于在Web浏览器中构建和测试软件应用程序的Web应用程序。
Novell SUSE Studio Onsite 1.0.3-0.18.1之前版本和SUSE Studio Onsite Appliance 1.1.2-0.25.1之前版本中可用软件的列表存在SQL注入漏洞。远程攻击者可利用该漏洞执行任意的SQL语句。
solution:Upgrade suse studio_onsite to a higher version than 1.0.3-0.18.1,and avoid the version (,1.0.3-0.18.1); Upgrade suse studio_onsite_appliance to a higher version than 1.1.2-0.25.1,and avoid the version (,1.1.2-0.25.1)