CVE-2011-0432

2011-03-1419:55:00

Debian Security Bug Tracker

security-tracker.debian.org

0.004 Low

EPSS

Percentile

72.2%

JSON

Multiple SQL injection vulnerabilities in the get_userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) pw argument. NOTE: some of these details are obtained from third party information.

OSVersionArchitecturePackageVersionFilename
Debian12allpywebdav< 0.9.4-3pywebdav_0.9.4-3_all.deb
Debian11allpywebdav< 0.9.4-3pywebdav_0.9.4-3_all.deb
Debian10allpywebdav< 0.9.4-3pywebdav_0.9.4-3_all.deb
Debian999allpywebdav< 0.9.4-3pywebdav_0.9.4-3_all.deb
Debian13allpywebdav< 0.9.4-3pywebdav_0.9.4-3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	pywebdav	< 0.9.4-3	pywebdav_0.9.4-3_all.deb
Debian	11	all	pywebdav	< 0.9.4-3	pywebdav_0.9.4-3_all.deb
Debian	10	all	pywebdav	< 0.9.4-3	pywebdav_0.9.4-3_all.deb
Debian	999	all	pywebdav	< 0.9.4-3	pywebdav_0.9.4-3_all.deb
Debian	13	all	pywebdav	< 0.9.4-3	pywebdav_0.9.4-3_all.deb

0.004 Low

EPSS

Percentile

72.2%

JSON

Related for DEBIANCVE:CVE-2011-0432