description: There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information.
problem types: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS USED IN AN SQL COMMAND ('SQL INJECTION') CWE-89
affected:
{
product: WebAccess/NMS
vendor: n/a
versions:
status: affected, version: Versions prior to 3.0.2
}