Lucene search
Ubuntu.comUB:CVE-2010-0438HistoryFeb 09, 2010 - 12:00 a.m.
CVE-2010-0438
2010-02-0900:00:00
ubuntu.com
ubuntu.com
6
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
71.4%
Multiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in
OTRS-Core in Open Ticket Request System (OTRS) 2.1.x before 2.1.9, 2.2.x
before 2.2.9, 2.3.x before 2.3.5, and 2.4.x before 2.4.7 allow remote
authenticated users to execute arbitrary SQL commands via unspecified
vectors.
Bugs
Related
nessus
nessus
openSUSE Security Update : otrs (openSUSE-SU-2010:0366-1)
2010-07-14 00:00:00
FreeBSD : otrs -- SQL injection (6b575419-14cf-11df-a628-001517351c22)
2010-02-09 00:00:00
openSUSE Security Update : otrs (openSUSE-SU-2010:0366-1)
2010-07-14 00:00:00
prion
prion
Sql injection
2010-02-09 19:30:00
cvelist
cvelist
CVE-2010-0438
2010-02-09 19:00:00
cve
cve
CVE-2010-0438
2010-02-09 19:30:00
freebsd
freebsd
otrs -- SQL injection
2010-02-08 00:00:00
openvas
openvas
FreeBSD Ports: otrs
2010-02-10 00:00:00
Debian: Security Advisory (DSA-1993-1)
2010-02-18 00:00:00
Open Ticket Request System (OTRS) Multiple SQL Injection Vulnerabilities
2010-02-22 00:00:00
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2010-02-12 00:00:00
[SECURITY] [DSA 1993-1] New otrs2 packages fix SQL injection
2010-02-12 00:00:00
nvd
nvd
CVE-2010-0438
2010-02-09 19:30:00
debian
debian
[SECURITY] [DSA 1993-1] New otrs2 packages fix SQL injection
2010-02-10 22:03:48
debiancve
debiancve
CVE-2010-0438
2010-02-09 19:30:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
71.4%
Related for UB:CVE-2010-0438