CVE-2011-1913

Опубликовано: 22 сент. 2011

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in the login form in the web interface in Mercator SENTINEL 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Ссылки

http://cert.netpeas.org/2011/06/cert-nps2011005-vulnerabilite-potentielle-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-%C2%AB-sentinel-safety-information-management-system-%C2%BB/
http://cert.netpeas.org/2011/06/cert-nps2011005-vulnerabilite-potentielle-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-suite/
http://secunia.com/advisories/46014
Vendor Advisory
http://www.kb.cert.org/vuls/id/122142
US Government Resource
http://www.securityfocus.com/bid/49638
https://exchange.xforce.ibmcloud.com/vulnerabilities/69847
http://cert.netpeas.org/2011/06/cert-nps2011005-vulnerabilite-potentielle-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-%C2%AB-sentinel-safety-information-management-system-%C2%BB/
http://cert.netpeas.org/2011/06/cert-nps2011005-vulnerabilite-potentielle-dans-la-solution-de-gestion-de-la-securite-operationnelle-des-compagnies-aeriennes-suite/
http://secunia.com/advisories/46014
Vendor Advisory
http://www.kb.cert.org/vuls/id/122142
US Government Resource
http://www.securityfocus.com/bid/49638
https://exchange.xforce.ibmcloud.com/vulnerabilities/69847

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mercator:sentinel:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00673

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-2vc9-3j28-9rcg

github

больше 3 лет назад