Security Advisory

CVE-2014-7871

6.5

Vulnerability Description

SQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6.0-rev23 allows remote authenticated users to execute arbitrary SQL commands via a crafted jslob API call.
Published Date November 21, 2014
Official Source NIST NVD Advisory