Skip to content

CVE-2016-5653 Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter.

MediumCVSS 6.5 EPSS 1.1%
Published
Updated
Exploit status
No public exploit known

Description

Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter.

Affected products

ProductAffected versionsFixed in
misys fusioncapital opics plus All versions No fix listed

References

  • VU#682704 third-party-advisory us-government-resource
  • 92035 vdb-entry