TI-2011-04278 CVE-2011-4970 · GHSA-7wqh-q87r-8p3jMultiple SQL injection vulnerabilities in LCG Disk Pool Manager (DPM) before 1.8.6, as…Priority LOW 36Multiple SQL injection vulnerabilities in LCG Disk Pool Manager (DPM) before 1.8.6, as used in EGI UDM, allow remote attackers to execute arbitrary SQL commands via the (1) r_token variable in the dpm_get_pending_req_by_…CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01498 · Published 2014-05-13 · No fix listed CWE-89
