| Package | Affected versions | Patched versions |
|---|---|---|
| maxdb | ≤ 7.6.3_build_007 |
SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in exec_sdbinfo and other unspecified commands, which are executed when MaxDB invokes cons.exe.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free