Lucene search

[email protected]CVE-2011-4113

HistoryFeb 17, 2012 - 11:55 p.m.

CVE-2011-4113

2012-02-1723:55:01

CWE-89

[email protected]

web.nvd.nist.gov

cve-2011-4113

sql injection

views module

drupal

vulnerability

nvd

security

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.6 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.4%

JSON

SQL injection vulnerability in the Views module before 6.x-2.13 for Drupal allows remote attackers to execute arbitrary SQL commands via vectors related to “filters/arguments on certain types of views with specific configurations of arguments.”

Affected configurations

NVD

Node

earl_milesviewsRange≤6.x-2.12

earl_milesviewsMatch4.7.x-1.0

earl_milesviewsMatch4.7.x-1.1

earl_milesviewsMatch4.7.x-1.2

earl_milesviewsMatch4.7.x-1.3

earl_milesviewsMatch4.7.x-1.4

earl_milesviewsMatch4.7.x-1.4.2

earl_milesviewsMatch4.7.x-1.6

earl_milesviewsMatch4.7.x-1.6beta

earl_milesviewsMatch4.7.x-1.6beta2

earl_milesviewsMatch4.7.x-1.6beta3

earl_milesviewsMatch4.7.x-1.6beta5

earl_milesviewsMatch4.7.x-1.xdev

earl_milesviewsMatch4.7.x1.5

earl_milesviewsMatch5.x-1.0

earl_milesviewsMatch5.x-1.1beta

earl_milesviewsMatch5.x-1.2beta1

earl_milesviewsMatch5.x-1.3beta1

earl_milesviewsMatch5.x-1.4rc1

earl_milesviewsMatch5.x-1.4-2rc1

earl_milesviewsMatch5.x-1.5

earl_milesviewsMatch5.x-1.6

earl_milesviewsMatch5.x-1.6beta

earl_milesviewsMatch5.x-1.6beta2

earl_milesviewsMatch5.x-1.6beta3

earl_milesviewsMatch5.x-1.6beta4

earl_milesviewsMatch5.x-1.6beta5

earl_milesviewsMatch5.x-1.7

earl_milesviewsMatch5.x-1.8

earl_milesviewsMatch5.x-1.xdev

earl_milesviewsMatch6.x-2.0

earl_milesviewsMatch6.x-2.0alpha1

earl_milesviewsMatch6.x-2.0alpha2

earl_milesviewsMatch6.x-2.0alpha3

earl_milesviewsMatch6.x-2.0alpha4

earl_milesviewsMatch6.x-2.0alpha5

earl_milesviewsMatch6.x-2.0beta1

earl_milesviewsMatch6.x-2.0beta2

earl_milesviewsMatch6.x-2.0beta3

earl_milesviewsMatch6.x-2.0beta4

earl_milesviewsMatch6.x-2.0rc1

earl_milesviewsMatch6.x-2.0rc2

earl_milesviewsMatch6.x-2.0rc3

earl_milesviewsMatch6.x-2.0rc4

earl_milesviewsMatch6.x-2.0rc5

earl_milesviewsMatch6.x-2.1

earl_milesviewsMatch6.x-2.2

earl_milesviewsMatch6.x-2.3

earl_milesviewsMatch6.x-2.4

earl_milesviewsMatch6.x-2.5

earl_milesviewsMatch6.x-2.6

earl_milesviewsMatch6.x-2.7

earl_milesviewsMatch6.x-2.8

earl_milesviewsMatch6.x-2.9

earl_milesviewsMatch6.x-2.10

earl_milesviewsMatch6.x-2.11

earl_milesviewsMatch6.x-2.xdev

AND

drupaldrupal

CPENameOperatorVersion
earl_miles:viewsearl miles viewsle6.x-2.12
earl_miles:viewsearl miles viewseq4.7.x-1.0
earl_miles:viewsearl miles viewseq4.7.x-1.1
earl_miles:viewsearl miles viewseq4.7.x-1.2
earl_miles:viewsearl miles viewseq4.7.x-1.3
earl_miles:viewsearl miles viewseq4.7.x-1.4
earl_miles:viewsearl miles viewseq4.7.x-1.4.2
earl_miles:viewsearl miles viewseq4.7.x-1.6
earl_miles:viewsearl miles viewseq4.7.x-1.x
earl_miles:viewsearl miles viewseq4.7.x1.5

CPE	Name	Operator	Version
earl_miles:views	earl miles views	le	6.x-2.12
earl_miles:views	earl miles views	eq	4.7.x-1.0
earl_miles:views	earl miles views	eq	4.7.x-1.1
earl_miles:views	earl miles views	eq	4.7.x-1.2
earl_miles:views	earl miles views	eq	4.7.x-1.3
earl_miles:views	earl miles views	eq	4.7.x-1.4
earl_miles:views	earl miles views	eq	4.7.x-1.4.2
earl_miles:views	earl miles views	eq	4.7.x-1.6
earl_miles:views	earl miles views	eq	4.7.x-1.x
earl_miles:views	earl miles views	eq	4.7.x1.5

Rows per page:

1-10 of 341

References

drupal.org/node/1329842

drupal.org/node/1329898

lists.fedoraproject.org/pipermail/package-announce/2011-November/069499.html

secunia.com/advisories/46680

secunia.com/advisories/46962

www.openwall.com/lists/oss-security/2011/11/04/3

www.osvdb.org/76809

www.securityfocus.com/bid/50500

exchange.xforce.ibmcloud.com/vulnerabilities/71124

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.6 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.4%

JSON

Related for CVE-2011-4113

nessus1 nvd1 prion1 ubuntucve1 cvelist1