Cisco Common Services Platform Collector SQL Injection Vulnerability

Cisco Common Services Platform Collector (CSPC) is an SNMP-based tool that discovers and collects information from Cisco devices installed on the network. configuration of Cisco Common Services Platform Collector prior to version 2.9.1.1 The dashboard is vulnerable to SQL injection, which can be exploited by an attacker to read restricted information from the CSPC SQL database by uploading a file containing SQL queries to the configuration dashboard.