Lucene search

[email protected]NVD:CVE-2011-4960

HistorySep 17, 2012 - 5:55 p.m.

CVE-2011-4960

2012-09-1717:55:02

CWE-89

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.003

Percentile

68.9%

JSON

SQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

Nvd

Node

silverstripesilverstripeMatch2.3.0

silverstripesilverstripeMatch2.3.1

silverstripesilverstripeMatch2.3.2

silverstripesilverstripeMatch2.3.3

silverstripesilverstripeMatch2.3.4

silverstripesilverstripeMatch2.3.5

silverstripesilverstripeMatch2.3.6

silverstripesilverstripeMatch2.3.7

silverstripesilverstripeMatch2.3.8

silverstripesilverstripeMatch2.3.9

silverstripesilverstripeMatch2.3.10

silverstripesilverstripeMatch2.3.11

Node

silverstripesilverstripeMatch2.4.0

silverstripesilverstripeMatch2.4.1

silverstripesilverstripeMatch2.4.2

silverstripesilverstripeMatch2.4.3

silverstripesilverstripeMatch2.4.5

VendorProductVersionCPE
silverstripesilverstripe2.3.0cpe:2.3:a:silverstripe:silverstripe:2.3.0:*:*:*:*:*:*:*
silverstripesilverstripe2.3.1cpe:2.3:a:silverstripe:silverstripe:2.3.1:*:*:*:*:*:*:*
silverstripesilverstripe2.3.2cpe:2.3:a:silverstripe:silverstripe:2.3.2:*:*:*:*:*:*:*
silverstripesilverstripe2.3.3cpe:2.3:a:silverstripe:silverstripe:2.3.3:*:*:*:*:*:*:*
silverstripesilverstripe2.3.4cpe:2.3:a:silverstripe:silverstripe:2.3.4:*:*:*:*:*:*:*
silverstripesilverstripe2.3.5cpe:2.3:a:silverstripe:silverstripe:2.3.5:*:*:*:*:*:*:*
silverstripesilverstripe2.3.6cpe:2.3:a:silverstripe:silverstripe:2.3.6:*:*:*:*:*:*:*
silverstripesilverstripe2.3.7cpe:2.3:a:silverstripe:silverstripe:2.3.7:*:*:*:*:*:*:*
silverstripesilverstripe2.3.8cpe:2.3:a:silverstripe:silverstripe:2.3.8:*:*:*:*:*:*:*
silverstripesilverstripe2.3.9cpe:2.3:a:silverstripe:silverstripe:2.3.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
silverstripe	silverstripe	2.3.0	cpe:2.3:a:silverstripe:silverstripe:2.3.0:::::::*
silverstripe	silverstripe	2.3.1	cpe:2.3:a:silverstripe:silverstripe:2.3.1:::::::*
silverstripe	silverstripe	2.3.2	cpe:2.3:a:silverstripe:silverstripe:2.3.2:::::::*
silverstripe	silverstripe	2.3.3	cpe:2.3:a:silverstripe:silverstripe:2.3.3:::::::*
silverstripe	silverstripe	2.3.4	cpe:2.3:a:silverstripe:silverstripe:2.3.4:::::::*
silverstripe	silverstripe	2.3.5	cpe:2.3:a:silverstripe:silverstripe:2.3.5:::::::*
silverstripe	silverstripe	2.3.6	cpe:2.3:a:silverstripe:silverstripe:2.3.6:::::::*
silverstripe	silverstripe	2.3.7	cpe:2.3:a:silverstripe:silverstripe:2.3.7:::::::*
silverstripe	silverstripe	2.3.8	cpe:2.3:a:silverstripe:silverstripe:2.3.8:::::::*
silverstripe	silverstripe	2.3.9	cpe:2.3:a:silverstripe:silverstripe:2.3.9:::::::*

Rows per page:

1-10 of 171

References

doc.silverstripe.org/framework/en/trunk/changelogs/2.3.12

doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6

www.openwall.com/lists/oss-security/2012/04/30/1

www.openwall.com/lists/oss-security/2012/04/30/3

github.com/silverstripe/sapphire/commit/fef7c32

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.4

Confidence

Low

EPSS

0.003

Percentile

68.9%

JSON

Related for NVD:CVE-2011-4960

prion1 cve1 cvelist1