Lucene search

[email protected]NVD:CVE-2010-4824

HistorySep 17, 2012 - 5:55 p.m.

CVE-2010-4824

2012-09-1717:55:02

CWE-89

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.006

Percentile

78.7%

JSON

SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when the Translatable extension is enabled, allows remote attackers to execute arbitrary SQL commands via the locale parameter.

Affected configurations

Nvd

Node

silverstripesilverstripeMatch2.3.0

silverstripesilverstripeMatch2.3.1

silverstripesilverstripeMatch2.3.2

silverstripesilverstripeMatch2.3.3

silverstripesilverstripeMatch2.3.4

silverstripesilverstripeMatch2.3.5

silverstripesilverstripeMatch2.3.6

silverstripesilverstripeMatch2.3.7

silverstripesilverstripeMatch2.3.8

silverstripesilverstripeMatch2.3.9

Node

silverstripesilverstripeMatch2.4.0

silverstripesilverstripeMatch2.4.1

silverstripesilverstripeMatch2.4.2

silverstripesilverstripeMatch2.4.3

VendorProductVersionCPE
silverstripesilverstripe2.3.0cpe:2.3:a:silverstripe:silverstripe:2.3.0:*:*:*:*:*:*:*
silverstripesilverstripe2.3.1cpe:2.3:a:silverstripe:silverstripe:2.3.1:*:*:*:*:*:*:*
silverstripesilverstripe2.3.2cpe:2.3:a:silverstripe:silverstripe:2.3.2:*:*:*:*:*:*:*
silverstripesilverstripe2.3.3cpe:2.3:a:silverstripe:silverstripe:2.3.3:*:*:*:*:*:*:*
silverstripesilverstripe2.3.4cpe:2.3:a:silverstripe:silverstripe:2.3.4:*:*:*:*:*:*:*
silverstripesilverstripe2.3.5cpe:2.3:a:silverstripe:silverstripe:2.3.5:*:*:*:*:*:*:*
silverstripesilverstripe2.3.6cpe:2.3:a:silverstripe:silverstripe:2.3.6:*:*:*:*:*:*:*
silverstripesilverstripe2.3.7cpe:2.3:a:silverstripe:silverstripe:2.3.7:*:*:*:*:*:*:*
silverstripesilverstripe2.3.8cpe:2.3:a:silverstripe:silverstripe:2.3.8:*:*:*:*:*:*:*
silverstripesilverstripe2.3.9cpe:2.3:a:silverstripe:silverstripe:2.3.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
silverstripe	silverstripe	2.3.0	cpe:2.3:a:silverstripe:silverstripe:2.3.0:::::::*
silverstripe	silverstripe	2.3.1	cpe:2.3:a:silverstripe:silverstripe:2.3.1:::::::*
silverstripe	silverstripe	2.3.2	cpe:2.3:a:silverstripe:silverstripe:2.3.2:::::::*
silverstripe	silverstripe	2.3.3	cpe:2.3:a:silverstripe:silverstripe:2.3.3:::::::*
silverstripe	silverstripe	2.3.4	cpe:2.3:a:silverstripe:silverstripe:2.3.4:::::::*
silverstripe	silverstripe	2.3.5	cpe:2.3:a:silverstripe:silverstripe:2.3.5:::::::*
silverstripe	silverstripe	2.3.6	cpe:2.3:a:silverstripe:silverstripe:2.3.6:::::::*
silverstripe	silverstripe	2.3.7	cpe:2.3:a:silverstripe:silverstripe:2.3.7:::::::*
silverstripe	silverstripe	2.3.8	cpe:2.3:a:silverstripe:silverstripe:2.3.8:::::::*
silverstripe	silverstripe	2.3.9	cpe:2.3:a:silverstripe:silverstripe:2.3.9:::::::*

Rows per page:

1-10 of 141

References

doc.silverstripe.org/framework/en/trunk/changelogs//2.3.10

doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4

open.silverstripe.org/changeset/114515

open.silverstripe.org/changeset/114517

secunia.com/advisories/42346

www.openwall.com/lists/oss-security/2011/01/03/12

www.openwall.com/lists/oss-security/2012/04/30/1

www.openwall.com/lists/oss-security/2012/04/30/3

www.openwall.com/lists/oss-security/2012/05/01/3

www.osvdb.org/69884

www.securityfocus.com/bid/45367

exchange.xforce.ibmcloud.com/vulnerabilities/63989

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.006

Percentile

78.7%

JSON

Related for NVD:CVE-2010-4824

cvelist1 prion1 cve1