Lucene search

RedhatCVE-2010-4824

HistorySep 17, 2012 - 5:55 p.m.

CVE-2010-4824

2012-09-1717:55:02

CWE-89

redhat

web.nvd.nist.gov

cve-2010-4824

sql injection

translatable.php

silverstripe

security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.006

Percentile

78.7%

JSON

SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when the Translatable extension is enabled, allows remote attackers to execute arbitrary SQL commands via the locale parameter.

Affected configurations

Nvd

Node

silverstripesilverstripeMatch2.3.0

silverstripesilverstripeMatch2.3.1

silverstripesilverstripeMatch2.3.2

silverstripesilverstripeMatch2.3.3

silverstripesilverstripeMatch2.3.4

silverstripesilverstripeMatch2.3.5

silverstripesilverstripeMatch2.3.6

silverstripesilverstripeMatch2.3.7

silverstripesilverstripeMatch2.3.8

silverstripesilverstripeMatch2.3.9

Node

silverstripesilverstripeMatch2.4.0

silverstripesilverstripeMatch2.4.1

silverstripesilverstripeMatch2.4.2

silverstripesilverstripeMatch2.4.3

VendorProductVersionCPE
silverstripesilverstripe2.3.0cpe:2.3:a:silverstripe:silverstripe:2.3.0:*:*:*:*:*:*:*
silverstripesilverstripe2.3.1cpe:2.3:a:silverstripe:silverstripe:2.3.1:*:*:*:*:*:*:*
silverstripesilverstripe2.3.2cpe:2.3:a:silverstripe:silverstripe:2.3.2:*:*:*:*:*:*:*
silverstripesilverstripe2.3.3cpe:2.3:a:silverstripe:silverstripe:2.3.3:*:*:*:*:*:*:*
silverstripesilverstripe2.3.4cpe:2.3:a:silverstripe:silverstripe:2.3.4:*:*:*:*:*:*:*
silverstripesilverstripe2.3.5cpe:2.3:a:silverstripe:silverstripe:2.3.5:*:*:*:*:*:*:*
silverstripesilverstripe2.3.6cpe:2.3:a:silverstripe:silverstripe:2.3.6:*:*:*:*:*:*:*
silverstripesilverstripe2.3.7cpe:2.3:a:silverstripe:silverstripe:2.3.7:*:*:*:*:*:*:*
silverstripesilverstripe2.3.8cpe:2.3:a:silverstripe:silverstripe:2.3.8:*:*:*:*:*:*:*
silverstripesilverstripe2.3.9cpe:2.3:a:silverstripe:silverstripe:2.3.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
silverstripe	silverstripe	2.3.0	cpe:2.3:a:silverstripe:silverstripe:2.3.0:::::::*
silverstripe	silverstripe	2.3.1	cpe:2.3:a:silverstripe:silverstripe:2.3.1:::::::*
silverstripe	silverstripe	2.3.2	cpe:2.3:a:silverstripe:silverstripe:2.3.2:::::::*
silverstripe	silverstripe	2.3.3	cpe:2.3:a:silverstripe:silverstripe:2.3.3:::::::*
silverstripe	silverstripe	2.3.4	cpe:2.3:a:silverstripe:silverstripe:2.3.4:::::::*
silverstripe	silverstripe	2.3.5	cpe:2.3:a:silverstripe:silverstripe:2.3.5:::::::*
silverstripe	silverstripe	2.3.6	cpe:2.3:a:silverstripe:silverstripe:2.3.6:::::::*
silverstripe	silverstripe	2.3.7	cpe:2.3:a:silverstripe:silverstripe:2.3.7:::::::*
silverstripe	silverstripe	2.3.8	cpe:2.3:a:silverstripe:silverstripe:2.3.8:::::::*
silverstripe	silverstripe	2.3.9	cpe:2.3:a:silverstripe:silverstripe:2.3.9:::::::*

Rows per page:

1-10 of 141

References

doc.silverstripe.org/framework/en/trunk/changelogs//2.3.10

doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4

open.silverstripe.org/changeset/114515

open.silverstripe.org/changeset/114517

secunia.com/advisories/42346

www.openwall.com/lists/oss-security/2011/01/03/12

www.openwall.com/lists/oss-security/2012/04/30/1

www.openwall.com/lists/oss-security/2012/04/30/3

www.openwall.com/lists/oss-security/2012/05/01/3

www.osvdb.org/69884

www.securityfocus.com/bid/45367

exchange.xforce.ibmcloud.com/vulnerabilities/63989

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.006

Percentile

78.7%

JSON

Related for CVE-2010-4824