Researcher John Leitch, working with HP’s Zero Day Initiative (ZDI), has identified an SQL injection vulnerability in CSWorks’ CSWorks software framework. CSWorks has produced an updated version that mitigates this vulnerability. This vulnerability could be exploited remotely.
AFFECTED PRODUCTS
The following CSWorks software versions are affected:
CSWorks Version 2.5.5050.0 and prior.