hipergate CRM / Patches / #117 PATCH 5.5.3 BUG 3102065 ACLUSER SQL INJECTION VULNERABILITY

#117 PATCH 5.5.3 BUG 3102065 ACLUSER SQL INJECTION VULNERABILITY

Status: open

Owner: nobody

Labels: None

Priority: 8

Updated: 2010-11-03

Created: 2010-11-03

Creator: Sergio Montoro Ten

Private: No

This patch fixes a critical SQL injection vulnerability in class com.knowgate.acl.ACLUser when used with PostgreSQL.

Discussion

Sergio Montoro Ten - 2010-11-03

Java class compiled with JDK 1.6

ACLUser.class

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Sergio Montoro Ten - 2010-11-03

Java class compiled with JDK 1.6

ACL.class

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Sergio Montoro Ten - 2010-11-03

Java class source

ACLUser.java

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Sergio Montoro Ten - 2010-11-03

Java class source

ACL.java

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.