vulnerability bulletin 13053
ESRI ArcGIS for Desktop: SQL injection
Synthesis of the vulnerability
An attacker can use a SQL injection in ESRI ArcGIS for Desktop, in order to read or alter data.Impacted products: ArcGIS for Desktop
Description of the vulnerability
ESRI ArcGIS for Desktop is a tool for geographical map creation.
It can be used wuith a relational database. However, for some query, user's data are directly inserted into the WHERE part of a SQL query. Request technical details are unknown.
An attacker can therefore use a SQL injection in ESRI ArcGIS for Desktop, in order to read or alter data.Complete Vigil@nce bulletin....
Share this bulletin
Computer vulnerabilities tracking service
Vigil@nce provides systems vulnerabilities bulletins
. The Vigil@nce vulnerability database contains several thousand vulnerabilities. The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system. The Vigil@nce security watch publishes vulnerability bulletins about threats impacting the information system.