Data exfiltration via SQL injection is not possible using this vulnerability." The flaw impacts FileCatalyst Workflow 5.1.6 Build 135 and older versions.

SQL injection, along with other types of database attacks, ranked as one of the top trends in the SANS Institute's Top 20 Vulnerabilities list. (See SANS Exposes 'Safe' Technologies.) ...

SQL injection is when the attacker embeds SQL code in what was supposed to be only data, and that's not the case here.” Whatever the classification, the vulnerability is about as severe as it gets.

A new month, a new high-risk Ivanti bug for attackers to exploit — this time, an SQL injection issue in its centralized endpoint manager. Nate Nelson, Contributing Writer June 13, 2024 3 Min Read ...