← Database

CVE-2008-2286

HIGH CVSS: 7.5 Published: 2008-05-18 Modified: 2026-06-16

Description

SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.

Affected Platforms

Symantec Altiris Deployment Solution

Weakness Type

CWE-89

References