CVE-2013-6872

Опубликовано: 21 янв. 2014

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:o-dyn:collabtive:*:*:*:*:*:*:*:*

Версия до 1.1 (включая)

cpe:2.3:a:o-dyn:collabtive:0.1:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.2:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.2.5:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.3:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.3.5:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.3.6:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.4:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.4.5:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.4.6:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.4.7:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.4.8:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.4.9:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.4.9.1:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.5.1:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.5.5:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.6:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.6.1:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.6.2:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.6.3:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.6.4:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.6.5:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.7:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.7.5:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:0.7.6:*:*:*:*:*:*:*

cpe:2.3:a:o-dyn:collabtive:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03074

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVE-2013-6872

ubuntu

около 12 лет назад

SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action.

CVE-2013-6872

debian

около 12 лет назад

SQL injection vulnerability in managetimetracker.php in Collabtive bef ...

GHSA-jj26-p49h-743v

github

больше 3 лет назад

SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action.

EPSS

Процентиль: 86%

0.03074

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-89