CVE-2014-7176

Опубликовано: 04 нояб. 2014

Источник: nvd

CVSS2: 6.5

EPSS Средний

Описание

SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobal_txt parameter to plugins/docman.

Ссылки

http://packetstormsecurity.com/files/128875/Tuleap-7.4.99.5-Blind-SQL-Injection.html
Exploit
http://seclists.org/fulldisclosure/2014/Oct/119
Exploit
http://www.exploit-db.com/exploits/35098
Exploit
http://www.securityfocus.com/bid/70773
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/98307
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7176/
Exploit
https://www.tuleap.org/recent-vulnerabilities
Vendor Advisory
http://packetstormsecurity.com/files/128875/Tuleap-7.4.99.5-Blind-SQL-Injection.html
Exploit
http://seclists.org/fulldisclosure/2014/Oct/119
Exploit
http://www.exploit-db.com/exploits/35098
Exploit
http://www.securityfocus.com/bid/70773
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/98307
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7176/
Exploit
https://www.tuleap.org/recent-vulnerabilities
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:enalean:tuleap:*:*:*:*:*:*:*:*

Версия до 7.5 (включая)

EPSS

Процентиль: 94%

0.13783

Средний

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-5fj8-w6gv-j9g7

github

больше 3 лет назад