Sql injection

2010-12-3021:00:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.3%

JSON

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CPENameOperatorVersion
xwikieq0.9.1252
xwikieq0.9.790
xwikieq0.9.543
xwikieq1.0 b2
xwikieq1.1 rc1
xwikile2.4
xwikieq0.9.840
xwikieq0.9.793
xwikieq1.0 b1

Name	Operator	Version
xwiki	eq	0.9.1252
xwiki	eq	0.9.790
xwiki	eq	0.9.543
xwiki	eq	1.0 b2
xwiki	eq	1.1 rc1
xwiki	le	2.4
xwiki	eq	0.9.840
xwiki	eq	0.9.793
xwiki	eq	1.0 b1

References

secunia.com/advisories/42058

www.osvdb.org/68976

www.securityfocus.com/bid/44601

www.xwiki.org/xwiki/bin/view/ReleaseNotes/ReleaseNotesXWikiEnterprise25

exchange.xforce.ibmcloud.com/vulnerabilities/62943