SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Referenceshttp://www.securityfocus.com/bid/49738http://securitytracker.com/id?1026130http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110929_00http://secunia.com/advisories/43157