CVE-2013-2745

Опубликовано: 04 дек. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2013-07/0100.html
Broken Link
http://media.blackhat.com/bh-us-12/Briefings/Cutlip/BH_US_12_Cutlip_SQL_Exploitation_WP.pdf
Third Party Advisory
https://debian.pkgs.org/8/debian-main-amd64/minidlna_1.1.2+dfsg-1.1+b3_amd64.deb.html
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-2745
Third Party Advisory
https://www.securityfocus.com/archive/1/527299/30/0
Third Party Advisory
VDB Entry
http://archives.neohapsis.com/archives/bugtraq/2013-07/0100.html
Broken Link
http://media.blackhat.com/bh-us-12/Briefings/Cutlip/BH_US_12_Cutlip_SQL_Exploitation_WP.pdf
Third Party Advisory
https://debian.pkgs.org/8/debian-main-amd64/minidlna_1.1.2+dfsg-1.1+b3_amd64.deb.html
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-2745
Third Party Advisory
https://www.securityfocus.com/archive/1/527299/30/0
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:minidlna_project:minidlna:*:*:*:*:*:*:*:*

Версия до 1.1.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00387

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVE-2013-2745

CVSS3: 9.8

ubuntu

около 6 лет назад

An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0

CVE-2013-2745

CVSS3: 9.8

debian

около 6 лет назад

An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0

GHSA-j44m-gq2g-v635

github

почти 4 года назад

An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0

EPSS

Процентиль: 59%

0.00387

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89